setting PASSWD_CANT_CHANGE in AD

Hi all,

do you see any chance to set the PASSWD_CANT_CHANGE flag from AD's
userAccountControl attribute via Net::LDAP? If not, is there any other
perl module or function that I could use?

PASSWD_CANT_CHANGE is something special, because it requires to set
some security attributes (ACE). If interested, please see the attached
KB articles:

http://support.microsoft.com/kb/305144
http://msdn.microsoft.com/en-us/library/aa746398.aspx


Generally the question seems to focus on setting ACEs or security
descriptors at all.

TIA.

Bye.
Michael.