Domain logon solution required.

The network we are working with requires the users to have local admin
accounts. Our problem is that people are using the local accounts instead of
their domain accounts to access services on our network. This is an issue
because our scripts and group policies are not being pushed to the clients.

We are looking for a solution to force users to use the domain account while
within our network, but still maintain the ability to use their local
accounts at home.

Unfortunately removing local admin accounts is not an option for political
reasons. The laptops are owned by the users.

Would there be a way to disable the login prompt when the user attempts to
access a shared folder from a local account? It would solve a few issues.

Thank you in advance for your time and consideration.