How will disabling a domain controller affect the PC of users in LAN?

Question

Windows Server

Greetings comrades. Sorry for the stupid question.
I'm setting up a domain controller.
And there were some questions. I hope you clarify.
1. If the domain controller (hereinafter referred to as the CD) is correctly configured, the roles are defined, the users are "started" and the like, then when the CD is turned off, no one will be able to log into their PC?
2. The question is idiotic. Hypothetically, the CD is configured. How to leave it on the local network (every PC sees and sees it, but there is no access to the Internet. That is, does the CD live within the local network?
3. Is it possible to flexibly configure user rights in the ability to access Internet resources using Windows Server
? , the questions are stupid
.
PS Happy holidays, sensei.

Answer 1

1. There is such a concept of cache time, if the user has already logged into the computer under his own name and the controller was available, then he will not notice a short shutdown of the CD. The new one will not be able to enter.
2. Yes, he does not need the Internet
3. No, this requires a separate product, usually a proxy server.