System Administration Guide
Chapter 1, Administering user accounts

Preventing users from changing their passwords

Preventing users from changing their passwords

In the Account Manager, select a user name, then select Password Restrictions from the Users menu, then select Selection.

Set User can choose own to No. Users will then have to get passwords from the accounts administrator when their passwords expire, or the password generator will create them. To use the system default value, set it to Default.

To change the system default value, use this command line:

usermod -D -x "{passwdChooseOwn value}"

where value is either 1 (users can choose their own password) or 0 (a password is supplied by the administrator or the password generator).

You can change the value for an individual user with the usermod(ADM) command by omiting the -D option and appending the user name to the above command.