use raw WMI queries for user and group enumeration

This allows to filter non-local account on remote side, which is much
efficient.

see: #2201
fix typo