allow domain users to be seen