Hi anonymous user-0082
Yes, you'll need a CAL for each user that connects to domain and take Per-User CALs, All users will need a CAL.
Domain Controller is accessed by admins only. There is a default 2 user CAL's for each server for management.
Please don’t forget to Accept the answer
and up-vote wherever the information provided helps you, this can be beneficial to other community members.