If a user is not authenticated to the network, then yes, it certainly presents a challenge for what you wish to achieve. While I’m not sure if it will help, could you potentially use separate LDAP authentication to eDirectory? From our early experience, LDAP is generally slower than NDAP authentication and distribution. However, if it works, it may be an option for your use case.
Otherwise the only way is to login at least periodically to the network or use a solution like ZENworks to distribute your applets.