That's because you didn't really log into the domain. The dial-up VPN
credentials *only* create the VPN link,...they do not log you into anything.
Once the machine is a domain member you can login over the VPN by selecting
the checkbox that says "Log on using dialup connection" at the
No. A machine cannot be a member of a Domain and a workgroup at the same
time. The closest thing you can do is make your workgroup the same name as
the domain and leave it in the workgroup.
Phillip Windell [MCP, MVP, CCNA]