The only thing I can come up with would maybe be a scheduled task that is triggered on login to run a script. Then that script I would need to check if its a local user/ domain user and if domain user remove the scheduled task after the steps