Locked Down Workstations and User Accounts

Create a Password Setting Object (PSO), assign users to the global security group associated with the PSO.

For complexity set
"msDS-PasswordComplexityEnable" to false
"msDS-MaximumPasswordAge" to the maximum password age period required.

Restrict accounts to logon to locked down workstations.