I've had a set of Macs working on my AD for some time now, going pretty well. We've just recently bought a Mac Mini Server to use Open Directory with them too, amongst other things. This is great, and I now have the ability to finally stop them messing with the system settings.

Just a small thing - when an AD user logs in, they get a popup asking them to locate the system settings.app. I know where this is, and it's easy enough to dismiss, but there's nothing I can find about this error within an AD envionment (it doesn't come up for admins or non-restriced AD accounts). Is there a particular Preferences app which launches this when it's locked out?