unplugged cable and logon locally with defined user in domain

Hi!
I have a windows 2003 sever. all clients are using windows xp Pro sp2. i defiend a user in domain and set security for it.
when users unplugged the network cable they can log on locally with defined user.why?