When setting a NT hash through SAM-R (or pbdedit --set-nt-hash), Samba should refuse 31D6CFE0D16AE931B73C59D7E0C089C0 NT hash as it is the blank password hash. MS-AD refuses this hash through SAM-R.