Losing administrative rights
This sort of pain isn't practically avoidable. The solution is to unbind your macOS computers from the domain and use a product like Nomad or Apple Enterprise Connect to get the password sync, kerberos certificates that allow single sign on without all the pain of binding.


Jamf Connect is the best of both worlds now - https://www.jamf.com/products/jamf-connect/


Alternatives are the open source Nomad (which exists alongside with it's commercial version Jamf Connect) and Enterprise Connect that integrates a local password without needing to bind to AD.


https://www.jamf.com/jamf-nation/discussions/17757/about-enterprise-connect
https://nomad.menu