I have my Macs bound to AD and have staff user groups set to be able to administer the Macs as a part of the binding. Users create a mobile profile as well.
When on the network they have admin rights to the local machine. When they go home they can log in but the admin rights go away.
Any suggestion on how to correct this? I am used to Windows PCs just holding your rights while on or off the network and am not too familiar with the Macs rules of operation.