You need to ensure that User1 can log on to Server1 by using his domain account when the WAN link is unavailable
You need to select the Control access through Remote Access Policy remote access permission for User1
You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts
You need to ensure that User1 is forced to use a different password the next time she changes her password