Allow non-administrators RDP Access to Domain Controller

Step-by-step guide

1. net localgroup "Remote Desktop Users"
2. net localgroup "Remote Desktop Users" /add corp\vasya.pupkin
3. open gpedit.msc
4. Go to Computer Configuration -> Windows settings -> Security Settings -> Local policies -> User Rights Assignment
5. Find the policy Allow log on through Remote Desktop Services
6. Edit the policy by adding the local group Remote Desktop Users (like this: corp\Remote Desktop Users), a domain user, or a group (like this: corp\ras-users) to it
7. gpupdate /force
8. Enjoy!