I suspect his computer is not a domain member -- until I made mine a member of my domain, Change Password never appeared after pressing
Ctrl-Alt-Del, regardless of the Security setting you mention. Funny how the simpler things are, the more complicated they get! :)

bd
NSC Volunteer SysOp