clean up global namespace calls
Make it possible to authenticate users without DC admin account credentials.