enable remote desktop access on specific machine via domain controller

we have a domain controller (W2008 RC2) and several computers as client machines. At the moment when we introduce a new user to the开发者_开发知识库 domain who has to have access to a subset of computers, the admin logs on to each of them and adds the user to the list of remote desktop users.

Is there a way to do this from the domain controller? (There has to be a way, because the way we do it sound a bit stupid, right?)

Best regards, Sascha

Why you just dont add a remote_desktop group to every computer at once. Then put the user into that group if needed. Then you control the access of the computer-access-list at the user setting "Computer Logon at/when" options.