NT user (who is locked changing his/her password by administrator) can bypass the security policy and Change the password.

Read more at www.xatrix.org