changing to .com fixed binding, but now another error

Changing from .local to .com fixed it. It bound up in seconds! :D I was originally able to view the AD users through workgroup manager. Like once. After a few restarts and adding a couple test users to AD, workgroup manager now "hangs" for a while with the "spinning ball of death" then replies with: Got Unexpected Error Error of type -14006 on line 1166 of PMMUGAccountsContentsView.mm - I am also having the "The account is not authorized to log in from this station" error as others have described. I have tried adding the "root" user to AD, and the kinit procedures described here, but with no luck. Does anyone have any input to these problems? I feel so close, but so far!