Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\Netlogon
Name: RefusePasswordChange
Type: REG_DWORD
Value: 1
After the first attempt to change the password,
setting RefusePasswordChange prevents the workstation
from further attempts to change the password (by returning a distinct status
code), but the workstation will try again in one week. Setting RefusePasswordChange stops the replication traffic, but not
the client traffic. Setting DisablePasswordChange to 1
on all client computers stops both client and replication traffic.