Changing passwords is turned off.

An administrator can turn it on using the Server application.