Binding to AD
We have found the issue to be mostly related to .local domains. In Snow Leopard Apple seemed to have addressed this issue. However, Lion appears to back to pre 10.6 when OSX didn't like .local.
We moved to a new domain to avoid future problems binding our Apple devices to AD.