Thank you to everyone who responded...

Just use the domain profile in group policy, ding-dongs. (Basically what catch was saying) The domain profile is active when the machine is in contact with the domain, otherwise the local profile is used. Someone already posted the reg keys.
I was able to turn the Firewall off in the Domain Policy in the Group Policy Management Console. Thanks again.