Allow host-level login/password for home/workgroup PCs while keeping global domain admins in Settings.