Does anybody know when the volatile cache is actually removed from the
workstation? Is it when the machine starts? Is it on the day of expiry or
after this day?

Reading the help implies that the expiry date only rolls forward for an
edirectory login. If a user just logs in to Windows using the cached
account then am I correct in assuming that thhis will not roll the time