tried to check the user can not change password option on DC Active directory users and computers
but after some time the options becomes blank status again without checked,suspect the GPO is take effect in background in each refresh interval
also tried to hide the change password when user hit the alt+del+ctrl,inGPO\user
configuration\administrative template\system\ctrl+alt+del options,enable\remove change password,but user still could change password when get prompted by system when its password age expired
is there a ultimate method to force the domain user can't change the password consistently?
thanks