OK not sure if I have this right. But I did find in group pereferences where I can have it creat a local user when the domain user logs in. So that should take care of my issue with rights over the local pc. Also as far as my laptop goes It appears I can enable file cacheing on the profile and that should allow the user to login to the domain when physically away from the network. I will test this all out tonight when I get home.