Win2k3 don't allow creating of domain trust accounts over SAMR