How do I not allow users to change passwords? Without going to every single user.

When I do ctrl+alt+delete it gives the user the option to change password. If I choose it, I can change the password. But I noticed a Password Policy Tab.
I clicked it and it displays the password policy. But I'll be darned if I can find it? I have looked in all the objects in consoleone I can see restrictions and can uncheck the option in the containers but it does not seem to effect the policy.