allow domain users to install without password prompt