I would like to prevent my users from changing their domain passwords from their workstations. We have a password reset portal that sets the users password in a number of places besides AD. I know there is an option in group policy to remove the change password option from the CTRL-ALT-DEL screen, but I believe the users still gets prompted to reset their password by the workstation at some interval before their password expires. Anyone know of a way to prevent users from changing their AD passwords via their workstations built-in mechanisms?
TIA