After binding Mac to AD, first login successfully creates mobile account and logs in, after that next login locks AD account
I ended up using the AD plugin from Centrify which worked fine.  I have abandoned the Apple plugin until they get their act together. Thanks!