3.2.5 Message Processing Events and Sequencing Rules
To obtain any context handle to the server, one of the following methods MUST be called initially: SamrConnect2, SamrConnect4, or SamrConnect5. With the ServerHandle parameter returned from these methods, it is possible to obtain other context handles and call any associated methods on the handle. See section 4.1 for an example.
Note The following methods do not require a context handle and can be called directly; they also do not return any context handle:
Note A user account MUST be enabled by clearing the UF_ACCOUNTDISABLE bit from the userAccountControl attribute before that account will be able to authenticate, as specified in [MS-KILE] section 18.104.22.168.1.