Why can my domain users log-on to their PC with no network connection ?

My users can logon to their PC using their domain user name/password when they have NO network connection – I thought this should be impossible ?? how can I prevent this happening ?

SORRY OK – I understand it and how to stop it using GP.

Mike at CCD