What type of permissions and/or roles do you need to assign to a Active Directory (Windows Server 2008 R2) user to be local administrator on Windows 7?
You can do this across a domain in three different ways.
Group Policy Preferences can be used to add domain users to local groups.
Group Policy Restricted Groups.
A startup script that runs
net localgroup administrators /add userNameGoesHere
None of these options require adding the user in question to a built-in Active Directory group.
This is a pretty common action for a computer by computer basis. There are tons of tutorials online about how to do this.
In general you do the following:
- Edit the local groups (like the tutorial I linked to above describes)
- Open the control panel in Windows and open the Users tool to add a user to the administrators group (screenshot below)