Perhaps that's an option elsewise (or perhaps the Exchange logon simply accepts you if you provide the right username and password even if you're not logged on to the domain. Maybe there's a way to control it in Exchange)?