No. The groups for a user are cached locally. At some time ProxyClient nees to be logged into the domain in order to establish the cache. However, the client does not have to be logged into a domain and/or a proxy server to have the policy rules for groups take effect once the groups are cached. Any additions/deletions/modifications to the rules will not be available to the Proxy Client until it is updated from it’s Client Manager.