Are you sure you don't want to use local installs?

Since we moved to a MSI installer, Strawberry _should_ installer properly via Active Directory Group Policy and behave like any other regular installable package.

Of course, since you said you wanted to be able to install new CPAN modules in an ad-hoc fashion, that might not work quite so well...