pub const DOMAIN_REFUSE_PASSWORD_CHANGE: ULONG = 0x00000020;