This should work on either Vista or XP.
Disable Logon to Windows Computers When Not Connected to a Domain
The default behavior in Windows when connecting to a domain is to cache the domain credentials locally so that they can be used to login even when the domain isn't available. You can set this value to 0 in order to disable logons to the computer while not connected to the domain.