use raw WMI queries for user and group enumeration

This allows to filter non-local account on remote side, which is much
efficient.

see: #2201
document changes
document last change
fix typo
cleanup whitespace
drop unused variable