On the JSS Under Configuration Profiles I have a Security and Privacy payload for Gatekeeper set to Mac App Store and Identified Developers and a check box in Allow users to change password.
When the Configuration Profile comes in it is incorrect, it flags Disable Password Reset as TRUE, however in the JSS I checked the box to “Allow user to change password”
Below is a link to screen shorts to further explain this issue.