Question : Allow real desktop access to Windows Server 2008 R2

A user would like to login a Windows Server 2008 R2 box on the actual box(not remote desktop), but I want to keep him a standard user.  I have edit group policy and allowed login locally.  Im pretty sure by design a domain user shouldnt have access to a server, but in this case the server is isolated on its own.  Anybody know how to do this?

Answer : Allow real desktop access to Windows Server 2008 R2

if its not replicating down to your local policy, or any other computer for a fact, you most likely forgot to right click the "default domain policy" and chose enforce

then rup gpupdate

should be good to go then?