The server MUST process the message subject to the following constraints:

  1. All updates MUST be done in the same transaction.

  2. The server MUST satisfy the constraints listed in section

  3. If the USER_ALL_NTPASSWORDPRESENT or USER_ALL_LMPASSWORDPRESENT flag is present in the WhichFields field, the server MUST update the clearTextPassword attribute with the (decrypted) value of SAMPR_USER_INTERNAL4_INFORMATION_NEW.UserPassword.