Disable force reset password for AD accounts

Bug: 979927
Change-Id: Ie35300e7fce923490c4885582d2b1ab4b5b53ea8
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1688617Reviewed-by: Tien Mai <tienmai@chromium.org>
Commit-Queue: Rakesh Soma <rakeshsoma@google.com>
Cr-Commit-Position: refs/heads/master@{#675684}

chrome/credential_provider/gaiacp/gaia_credential_base.cc

@@ -2153,11 +2153,16 @@ void CGaiaCredentialBase::DisplayPasswordField(int password_message) {
                               GetStringResource(password_message).c_str());
       events_->SetFieldState(this, FID_CURRENT_PASSWORD_FIELD,
                              CPFS_DISPLAY_IN_SELECTED_TILE);
-      events_->SetFieldState(this, FID_FORGOT_PASSWORD_LINK,
-                             CPFS_DISPLAY_IN_SELECTED_TILE);
-      events_->SetFieldString(
-          this, FID_FORGOT_PASSWORD_LINK,
-          GetStringResource(IDS_FORGOT_PASSWORD_LINK_BASE).c_str());
+      // Request force password change wouldn't work on a domain joined
+      // machine as it requires domain admin role privileges to communicate
+      // with the domain controller whereas GCPW only has SYSTEM privilege.
+      if (!OSUserManager::Get()->IsUserDomainJoined(get_sid().m_str)) {
+        events_->SetFieldState(this, FID_FORGOT_PASSWORD_LINK,
+                               CPFS_DISPLAY_IN_SELECTED_TILE);
+        events_->SetFieldString(
+            this, FID_FORGOT_PASSWORD_LINK,
+            GetStringResource(IDS_FORGOT_PASSWORD_LINK_BASE).c_str());
+      }
       events_->SetFieldInteractiveState(this, FID_CURRENT_PASSWORD_FIELD,
                                         CPFIS_FOCUSED);
       events_->SetFieldSubmitButton(this, FID_SUBMIT,