Hello PwC,
If you are implementing password security, then users should not have the ability to change their password, since a central authority needs to control and administer them. Also, Users cannot have access to the User menu choice as they could change their Group assignment.
_________________________
Andrew Bates