Set "client" domain control rights for domain 0