[Samba] Prevent password change from command line

[Arnaud FLORENT]

Hi

i m looking for a command / script to set user "User cannot change 
password" attribute
in Samba AD DC (currently 4.3.11-Ubuntu) like from aduc


found
https://groups.google.com/forum/#!topic/linux.samba/86cB1X8c-1c
and
https://lists.samba.org/archive/samba/2013-August/175185.html

but no solution provided

the UserAccountControl flag "PASSWD_CANT_CHANGE" can not be set via ldap
and there is no sambatool useer subcommand to do this...

do you think there is a solution?