Fix ad_user cannot_change_password state

[bmhughes]

Description

As documented at https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/useraccountcontrol-manipulate-account-properties the PASSWD_CANT_CHANGE flag does not represent the state of the user cannot change password setting after circa Server 2008 as the function is achieved by ACEs instead.

Read the value from the default property PasswordNeverExpires instead

References

• #127

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[hashicorp-cla]

All committers have signed the CLA.