need to be able to connect to a domain member as a local account; don't always map...