s3: Always try SamLogonEx