Print screen 1.
by default domain users are logged-in as guest on domain computers . On Group policy (gpedit.msc)local computer->Windows Settings->Security Settings -> User Rights Assignment->Allow log on locally . Delete the Guest group. in my case i deleted user groups too because i don't want the local user to log on my PC.Add the domain user to allow access.
Printscreen 2
