Setting a user on a local machaine with AD

Hello, I am looking for an easy way to set up users on a local machaine using AD. I have romaing profiles set up and running. So lets say a person logs into the local computer and wants to run a program. The person can’t run the program because they do not have rights to it. Are there any way when a user logs into the computer to have the rights set to let’s say a power user for the local machaine? I can do this by going to each computer and setting up the local account on the computer. But I have about 300 computers and 650 users soo…. LOL….