Allow host-level login/password for home/workgroup PCs while keeping global domain admins in Settings.
Store domain admin in ui_settings (DB overrides env); qwinsta/logoff use effective config. Host card: POST /hosts/{id}/actions/winrm-test via pywinrm.