Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
"Interactive logon: Require Domain Controller authentication to unlock"
Short version, needs to talk to server to login :PQuote:
Logon information must be provided to unlock a locked computer. For domain accounts, this security setting determines whether a domain controller must be contacted to unlock a computer. If this setting is disabled, a user can unlock the computer using cached credentials. If this setting is enabled, a domain controller must authenticate the domain account that is being used to unlock the computer.
"Only issue" that could arise if you haven't thought about it so far, is local logins etc. Not sure how that'll interrupt with it.
*EDIT - Seems I was slow :(