How does this work then? How can i install the basic AD user tool?
Ah I see, you mean minimum time to change password. That sounds quite useful as a start.
This gives details of how to delegate the Unlock Account right - How To Delegate the Unlock Account Right
It's similar for all other delegation of rights over accounts. There are also various tools available which'll make it even easier for them.
Setting minimum password age is detailed here, and means that a password cannot be changed until it has been used for the length of time set: Minimum password age: Security Configuration Editor; Security Services
many thanks, I'll give it a go.
You could easily do this by re-blocking the students from changing their password through Ctrl-Alt-Delete and using a 3rd party application which can first filter their data entry for bad words. i could knock something up in half hour to do that.
I do however agree with the above comments that it is a futile exercise, and anyway if you block the word bastard they will simply type b4sta4rd instead, it makes no difference to them.
Or just tick the box do not allow user to change password and password never expires in AD.
Kid: "Sir, I've forgotten my password".
Me: "I can reset it for you. What's your football team".
Kid: "Man U". (It was always Man U)
Me: "Ok your password is now wbarulez" (appropriate as we were in the Black Country).
After a week or so, I'd reset to to what they wanted and you know they never forgot it again.