How to turn off server requirement for cached profiles

Hey everyone,

In 1 week I will have 3 government laptops connecting to my company's network. They need to be able to use their Belka Domain profiles on the government laptops without the cache being stored on them. I need to turn off the servers requirement to push a cached profile onto the laptops. The government will not allow the cached profiles since it would super-cede their security settings. Also, I need to turn off the necessity for the laptops to have a cached profile or connection to the server to login to their domain profiles when they are not connected to the network. The reason for this is the laptops will be at a remote location and they need to use VPN software. This requires them to first login to their domain profiles.

Thank you for your time,
Garrett