6.3.3.1 Syntactic Validation of the Filter
If any of the elements is specified more than once, then the filter is invalid.
If the value of the string passed with DomainGuid has a different size than the size of GUID ([MS-DTYP] section 2.3.4), then the filter is invalid.
If the numeric value of the string passed with AAC is longer than the largest unsigned integer that can be represented in a DWORD or has an unsupported bit set, then the filter is invalid.
If the numeric value of the string passed with NtVer is longer than the largest unsigned integer that can be represented in a DWORD or has an unsupported bit set, then the filter is invalid.
The response of the DC for the invalid filter case is documented in section 6.3.3.3.
The DC MUST ignore any unrecognized filter elements.