When a domain member logs on to a domain which has GPOs, the user receives the policy.
If the users connects via RAS, they will only receive the policy under either of the following conditions:
1. They press CTRL+ALT+DELETE in the 'Log On to Windows' dialogue and select Log on using dial-up connection.
2. They specifically request the policy:
SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE
SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE