It is not authenticating against the DC, but when it is on the network, the script *could* talk to the DC.

Any operation involving use of file/print on the network involves a check with the DC to verify the user is allowed, since the user does not have a current token from the domain. That is pass-thru authentication.
_________________________
{Insert your favorite Witty Tag Line here}