I have the situation that need to set "User cannot change password" to all users, I check this option on User Properties, so past about 30 minutes uncheck itself, this occour to all users on domain, old and new users.
The users who are member of Domain Users (only) or participate to others, had same problem.
What I was done:
- I change the GPO "Default Domain Policy" to disable Password Policy
- I change permissions to all security groups to deny "Change Password" on one user object
- Change option from Windows Command Line: wmic useraccount where name='username' set passwordchangeable=false
But all tests had same results, about 30 minutes the option "User cannot change password" uncheck itself.
My domain controllers was in Windows Server 2008 R2 SP1, Forest and Domain funcional level was Windows Server 2008 R2.
Detail was that this domain was upgrade from 2000 to 2003 and to 2008 R2 SP1.
Have any one passed from this problem?
Tibiriçá Rosa Cibils, Gestor de T.I. MCITP, MCTS, MCT, MCSA +M, STS, SSE