Local user on Win2000 PDC

Once you DCPROMO a server to a domain controller, you no longer have Local users & Groups. You will see it is disabled in Computer Management. All users and groups are now "Active Directory"
You can however control which Active directory groups arepermitted to log on to your PDC via Group policy

login on locally so the pdc is probably not a good idea. user deletes a file and poof, the pdc is toast and so is your network. but to answer your question, just go to manage computer and setup a local account and create user accounts, remeber, these user account (though you may name them the same) are different than the dc accounts.

You can edit the Default Domain Controller Policy to allow interactive logons for specific users/groups.

First you have to ask yourself, why would you want to allow domain users to logon to your PDC?

If you want them all to have administrator rights, add them to the Administrators group. Be aware that at this point, you've lost all control over what happens to that machine.

This question was auto closed due to inactivity