So bottom line, i am guessing... you can still log on locally to the DC, you just have to be in the admin group or other permitted group allowed by the group policy."
i'm not sure what the answer is here but I think it simply means you must have a Domain account to logon to the DC as there is no local security database. I.e. you can sit down infront of it and log in but only with a domain account. With a workstation you could log in as a local account (all though you would have no access to the network)
Intel core I7 920
6GB OCZ platinum 1600
Samsung 1TB F1 Spinpoint
Samsung SM2443BW 24"