The ability of a user to change their own password is a permission that can be granted or denied. For more information about programmatically reading and modifying this permission using the LDAP provider, see:
It is easier to read and modify the User Cannot Change Password setting using the WinNT provider. For more information, see User Cannot Change Password (WinNT Provider).
Send comments about this topic to Microsoft
Build date: 11/12/2009