Active Directory Default Domain User permissions?

Solution 1:

By default all new users are part of the Domain Users group. That group in turn is part of the Users group on all machines in the domain. So a user will have the privileges of a normal - non admin user on any box in the domain. What that means is they will be able to write to files in their home directory but not much else without permission updates.

Solution 2:

A standard user does have the user right to log on locally to all member computers. A standard user does not have the user right to log on locally to a domain controller.

A quick look at the NTFS permissions on the root drive of any member computer will show you what NTFS permissions a standard user has to the file system.