The issues is FileVault. It requires a local account that's authorized to unlock the machine but should work with non-admin local account too. Maybe a non-admin local account with a startup task to logoff, so they can then they can then login with their network account.
We are in the process of deploying Macs on the network. We want the user to be able to sign in with their network accounts. I can get this working only if we sign in with the local admin account first. If I shut down or restart the Mac, I can no longer sign in with a network account.
If I sign in with the local admin, sign out. I'm golden, but obviously that doesn't work.
So far I've tried the following:
Unbound the Mac from the domain. Reboot. Bound to the domain.
Unchecked force local home directory
Unchecked UNC path
We are using FileVault, because we have to have the drive encrypted.