You could explicitly revoke authority to the CHGPWD command for this user.
For example, to revoke authority for user KGRAAP:
GRTOBJAUT OBJ(CHGPWD) OBJTYPE(*CMD) USER(KGRAAP) AUT(*EXCLUDE)
================================== MORE INFORMATION ON THIS TOPIC ==================================
Ask the Experts yourself: Our experts are waiting to answer your OS/400 questions.
Ask your OS/400 questions--or help out your peers by answering them--in our live discussion forums.
This was first published in November 2002