Overview#The user cannot change the password.
The user cannot change the password. Note: You cannot assign the permission settings of PASSWD_CANT_CHANGE by directly modifying the UserAccountControl attribute. For more information and a code example that shows how to prevent a user from changing the password, see User Cannot Change Password.
The PASSWD_CANT_CHANGE value is apparently controlled by a ACL within Active Directory.