Windows Server 2016 notify administrator when user changes computer network password

I would like to be notified when users change their login password.
(Systems are networked with Windows Server 2016, in AD)
And I would like to prevent all users from changing their password.
100questionsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Shreedhar EtteTechnical ManagerCommented:
You can achieve this using GPO:
How to Configure a Site, Domain, or Organizational Unit to Prevent Users from Changing Passwords Unless Prompted:
1. On AD Server Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click the domain or organizational unit for which you want to implement the new password change policy, and then click Properties.
3. Click the Group Policy tab.
4. Click the Group Policy object (GPO) that you want to work with, and then click Edit. If there are no existing policies listed in the Group Policy Object Links list, click New to create a new policy, type a name for the new policy, and then click Edit.
5. Expand the GPO, expand User Configuration, expand Administrative Templates, and then expand System.
6. Click Ctrl+Alt+Del Options.
7. In the right pane, double-click Remove Change Password.
8. Click Enabled, and then click OK.
9. Quit the Group Policy Object Editor snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.
10. Click Start, and then click Run End user desktop or the policy will apply after log off / login.
11. Type cmd in the Open box, and then click OK.
12. At the command prompt, type the following line, and then press ENTER:
gpupdate /target:user /force
13. Type exit to close the command prompt.
MaheshArchitectCommented:
This will not stop users to set password when password expires

May we know what you want to achieve exactly
You could set minimum password age just behind maximmum password age and it will prevent password change prompt
Shaun VermaakTechnical SpecialistCommented:
And I would like to prevent all users from changing their password.
Please don't. But if you have to, enable User cannot change password on individual accounts in conjunction with a Password never expires
Prevent-users-from-changing-Password.jpg
As for being notified on password change, you can modify this script
https://www.experts-exchange.com/articles/32998/Two-way-Password-Synchronization-from-one-Active-Directory-Domain-to-another-using-DSInternals.html

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2016

From novice to tech pro — start learning today.