@dhorsfall We've noticed in our environment (AD Mobile accounts) that
you don't have to re-bind, just authenticate the user in System
Preferences from a local admin account (i.e. click on the Unlock icon
and have the user login with their credentials...