I discovered to make the password reset function with default account options (force password reset on first logon checked, User Cannot Change Password and password never expired unchecked, etc) I need write permissions to the 'User Cannot Change Password' Property. I can't seem to locate the GUID for that property either on the Microsoft site or in the Adaxes console.
I have already granted write permission to account options but that doesn't appear to be enough because I get an error in the web interface saying I can't reset the users password because I can't write the 'User Cannot Change Password' Property. As soon as I assign that permission in the UI it works.
I'm trying to build all security roles in powershell. I'm hoping there's a GUID for that I can add to my script, I just can't find the darn thing.