Active Directory user account as local administrator

Hi guys,

I need a hand on how to give local admin rights to a user (managed by AD).
I need to give him access to a specific server to do the debug job and restrict any possibility to access any ressource on the network. .. mapped drives for example..

Any ideas with a simple way?

A appreciate for your help.

Regards

Diogo