The passwords will eventually expire (based on the password expiration policy), but the users won't be able to change them unless they connect to the network. If they try, they'll receive some error about not being able to change unless they connect to the domain.
The 10 just means that the last 10 users' credentials are cached.
