Allow log on locally in Default Domain Controller Policy.



I was looking over our group policy settings while studying for 70-292 and
noticed that the group Domain Users is included in the Allow log on locally
setting in the Default Domain Controller Policy. Is this ok or dangerous?
Is it necessary? DCs are 2003 standard.
.