Logging in

I am in a situation where we want to have people log in to the domain instead of their Win2k Pro machines. Our concern is with laptops. Can they log into the domain using cached files while not connected to the network?

If we stay with logging in to the machine, what kind of control do we have executing logon scripts for the machines?