Release Notes › Policy Server Release Notes › Known Issues › Known Issues in r12.0 SP2 › Passwords for User Accounts Stored in Active Directory cannot be Locked (48125)
SiteMinder continues to let users change their passwords when the "User cannot change password" feature is enabled for the accounts.