Windows2000 Server user rights

How can we assign an ordinary user a userright to log on locally on a windows2000 domain controller as we assign the right but it does’nt work?
Why