In Doman controller if any policy like allow logon locally etc needs to set? If yes I am looking which is policy needs to enable or disable in security settings

You can do this through a GPO ( Default Domain Controllers policy if you want it on your DCs) and here is a good step by step to set a retriction on logon : http://community.spiceworks.com/how_to/2797-restrict-computer-logons-to-a-group-of-users

Hello,

by default domain admins can access the DCs, so there is no need to configure anything special.