Use the ICIClientSettings interface GetChangePwd method to check if users can change their passwords. Refer to User Password Settings for an illustration of how this and other Client Settings Interface Methods and Properties can be accessed in the Administrator interface.
[out, optional] VARIANT_BOOL *pInherited,
[out, retval] VARIANT_BOOL *pVal);
0 = Prohibit
1 = Allow
-2 = Inherit