Domain Controller

Hi,

We having 1 DC (Windows 2008 R2) and 3 Additional DCs(Windows Server 2008 R2).

Here is the requirement.

1. I want to restrict users to login all these Dc's Remotely (RDP)

2. I want to give my desktops engineers to only add desktops (XP,Vista,Windows 7 and Windows 8) as a client of Domain.

3. I want to restrict some OUs to my junior sys admins.