Terminal services without admin rights

Hi!

How do I set up an AD account on a Windows 2000 Server (domain controller), so that the user can access another server on the network (also Win2000), and not giving him full rights to the domain and server?

Thank you!