When they take them offsite and login are they trying to log into the domain that isn't connected or are they logging into the local machine? And are you using roaming profiles?
I will have to pull a laptop and test it here to see if I can create that problem, because I have never seen it.