Is there a way to disallow password changes from certain machines without
completely removing a users ability to change their own password? Even just
hiding/disabling the "Change Password" button on the Windows Security screen
(CTRL-ALT-DEL) would probably suffice.

Here's where I'm coming from: we have a large number of users in satellite
offices and working out of their homes. They all have laptops that they use
for 75% of their work but they're still regularly required to access our
Terminal Servers for various reasons. We force users to change password
regularly. Every now and then though one of the remote users will change the
password VIA the terminal server - which updates it on the corporate LAN but
leaves their laptop out of synch. Invariably they then end up locking
themselves out.

Re: Disallow change password from some computers by S

S
Wed Jun 22 06:56:29 CDT 2005

Nope that isn't possible - I'd consider replacing passwords with smart cards
to avoid the need to change passwords

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"Josh Muehe" <JoshMuehe@discussions.microsoft.com> wrote in message
news:E903D78C-63A1-4F17-8109-052620FE8399@microsoft.com...
> Is there a way to disallow password changes from certain machines without
> completely removing a users ability to change their own password? Even
just
> hiding/disabling the "Change Password" button on the Windows Security
screen
> (CTRL-ALT-DEL) would probably suffice.
>
> Here's where I'm coming from: we have a large number of users in satellite
> offices and working out of their homes. They all have laptops that they
use
> for 75% of their work but they're still regularly required to access our
> Terminal Servers for various reasons. We force users to change password
> regularly. Every now and then though one of the remote users will change
the
> password VIA the terminal server - which updates it on the corporate LAN
but
> leaves their laptop out of synch. Invariably they then end up locking
> themselves out.