pokreni Active directory pa edituj group policy za domain controler:
computer configuration ==> windows settings ==> security settings ==>
local policies ==> user rights assignment i pod log on locally ubaci korisnike i;li korisnicke grupe ya koje zelis da se loguju na DC.
Mali je glup, al' se uporno trudi!