you could disable caching of the login credentials: this would prevent the user from logging in with no network connection.
but you should be aware that Microsoft (and many others) no longer recommend password expiration, so perhaps you should rather consider to drop the expiration date.