AD User as an administrator on the Mac?
Does this command not work for you?

dseditgroup -o edit -n /Local/Default -u localadmin -p -a networkuser -t user admin


details: Mac OS X: Allowing administration by network accounts