Keeping SEPM policies on a non-domain computer after deployment

Afternoon,

We have a non-domain computer we are about to put SEP on (we're just going to connect it to our domain via network cable).
My question is: once this computer is no longer connected to our network, will the SEPM policies remain active (hence: no USB for example)?

I know that SEP will be able to update itself via LiveUpdates because that has nothing to do with our network and it's talking directly to symantec, but what about the policies?

Thanks!