How to disable Active Directory 'change password' when creating the Account from Java?

Question

I can create an Active Directory account, from Java, using sample code from : http://forums.sun.com/thread.jspa?threadID=582103

In active directory 2008, how can I create an Active Directory account whereby the user cannot change password - the sample code suggests setting userAccountControl flag to 0x0040.

Can anyone confirm that this is the recommended approach in Active Directory 2008 (R2)?

Thanks.