Cisco VPN locked down users

[defuseme2k]

Is there any way to force a log off of windows when a user disconnects? I was looking for actions upon disconnect, like the ability to run a command, and so on. The users are not supposed to use their computers except for company business, and I want to ensure they are not using the vpn to authenticate with the domain (no cached logins) and then are disconnecting once they are logged in.

Any help on this from any angle would be useful! Thank you.