my Network as below :
Parent domain controller and additional one .
I tried to change the default domain policy to allow login through Desktop for remote desktop group , but after that I can't login to any member of the domain computers so I have roll back this policy to be not configure and I have restart all servers and I could login remote desktop for all servers and the additional Domain Controller only the parent domain controller i can't login with error message you have to grant the access login to be member of remote desktop manually , i tried to restart and run update policy but nothing .