We don't have a large amount of Macs. But this is our procedure. The device is assigned to the user with there AD credentials (during DEP) and the appropriate profiles and apps come down. During setup, the local account is an admin account (we call it "techlocal") is created. After verifying that the AD bind was successful (configuration profile) and the login page profile came down, we hand it over to the user - they login with there AD credentials and a mobile account is created. Anytime they are on the corporate network, we rsync via a script at login all there local data (Files on the Desktop, Documents, Photos, Videos) onto there network home (stored in an SMB share). The network home acts as a backup for there data. We played with the idea of ditching AD and using something like NoMAD to "lose the bind", but keep the benefits of AD (kerebos), but decided against it as we have no problem with AD.
Find this helpful? Click the kudos button. Thanks!