How to assign "Allow log on locally" rights to a Domain Controller

The Microsoft Knowledge Base has an answer (KB 234237):

1. Run mmc
2. Add Group Policy Management snap-in
3. Browse to your domain, right-click and click Edit
4. Open the path Default Domain Controllers Policy\Computer Configuration\Windows Setting\Security Settings\Local Policies\User Rights Assignment
5. Edit Log On Locally settings