user cannot change password setting won't save HELP please

Hi to all of you. Any help here will be appreciate

I have a windows 2000 server + 20 user windows 2000 Prof.
Now I have two user normal users, that when I set "user cannot change password "on the server active directory user properties.
Next day the setting gets uncheck again it does not keep the settings. Even on hour later it goes back and does not keep the setting, I check they are not admin or same thing else on the network...group policies?????

Any help here THANKS.IN ADVANCE
NICE 22

 

Its hard to say what might be causing this. Please do the following to see if we can get some more information.

Turn on security auditing for passwords to see if anything of interest is recorded. To do this do:

On your Domain Controller goto:

Start > Programs > Administrative Tools > Domain Security policy

Expand Local policys > Audit policy. Set all of the settings to record both sucess and failure.

Exit the app.

Your DC should start recording all logons, password changes, password failures, attempts to change the policy on user accounts etc to the Security Event log.

Once this is done see if your problem still occurs. Then look in the Security Event log to see if there is anything suspicius. Possibilitys include, (but are not limited to) System policy resetting permissions, malicous users being naughty.

Me