I'm not sure how you would do this with a novell server, but if you make a Win2k domain, it is easy.
Got to Administrative Tools -> Local Security Policy -> Local Policy -> Security Options. There you'll see the setting "Interactive logon: Require Domain Controller authentication to unlock workstation", which you would want to enable. Another setting of interest is "Interactive logon: Number of previous logons to cache (in case domain controller is not available)", which you would set to zero.
Look around at other stuff in there as well, because that's where you'll find a lot of the things you were able to do with poledit.