samr_open_user
status = samr_open_user(&domain_handle, MAXIMUM_ALLOWED,
status = samr_open_user(&domain_handle, access_mask,
DWORD samr_open_user(mlsvc_handle_t *, DWORD, DWORD, mlsvc_handle_t *);