Enable User cannot change password

[theo1881]

How do we setup an ou in active directory so all users have the box 'User Cannot change password' ticked on the account tab of the properties page.

Have looked at group policy settings but seems to be nothing there to set this.

We need to set this with all current users as we are moving to a new domain and want to deny the rights to change passwords as it could get messy !

 

[somebigguy]

Even if there was a GPO option for it, it wouldn't work because that would be considered an Account Policy and those policies only get applied at the domain level, not the OU level.

You could probably write a little VB script and use the LDAP object to cycle through all objects in an OU and change the setting that way.