Domain logon without network connection + group policies

Hi,

I've realized that it's possible to logon to a domain without a
network connection and bypass the group policies.

This provides false security when deploying policies that restrict
user permissions, so my question is:
1. Is it possible to forbid logon if the workstation can't connect to
the Domain Controller;
2. Or is it possible to have a cache of the group policies so that if
the workstation doesn't have network, it uses the last policies?

One workaround is deploying the policies as local ones, but that
removes the flexibility of deploying / changing the policies from the
domain, so i'm open for other suggestions.

Thanks in advance,
Manuel Sousa

---------------------------------------------------------------------------
---------------------------------------------------------------------------