The current scenario We have a domain with n no of computers , the same time we have some laptops on workgroup. Sonicwall fire wall is working as a gateway for the domain. We have certain user policies implemented on domain level. All the laptops are working on Wireless Lan. I need those laptops to be added to the domain. But the problem comes when the laptops are going out of domain, usually the users will login as local users. Then the profile will get changed. I am looking for a solution like the user wont get affected by the change of profile irrespective of whether they are logging in the domain or as local user. One more clarification needed, incase the user is added as in Admin group (Local system), what could be the implication of Domain Level restrictions.