The server MUST process the message subject to the following constraints:

  1. All updates MUST be done in the same transaction.

  2. The server MUST satisfy the constraints listed in section

  3. If the USER_ALL_NTPASSWORDPRESENT or USER_ALL_LMPASSWORDPRESENT flag is present in the WhichFields field, the server MUST update the clearTextPassword attribute with the (decrypted) value of SAMPR_USER_INTERNAL4_INFORMATION.UserPassword, using, as the decryption key, the 16-byte SMB session key obtained as specified in section