If you have necessity to logon to Domain Controller without having Domain Admins permissions you should change Default Domain Policy checking if you users belongs to "Deny log on locally" section
Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Assignments
Here it is original article
https://www.top-password.com/blog/fix-the-sign-in-method-youre-trying-to-use-isnt-allowed/
