Make it possible to 'net rpc samdump' of any domain you are currently joined