You're entirely right, that's a domain-policy option. It's a security feature to require a Ctrl+Alt+Del before showing a password box.