- Do you want to apply this to all users (this will include your own account)?
- There are command line ways to change your own password, blocking ctrl-alt-del will not stop these.
So the real question: why do you want to restrict these accounts? There are probably better approaches.
(Those account options are what you need: why not just set them?)
Based on comment: I would expect a Group Policy applied to the users' OU would be the simplest approach. Ensure users who are exempted are in a separate OU. However password policy is part of Computer Configuration so applies to computers not users. Therefore I expect it won't work unless the two groups of users never use the same computers.
Putting the target users in their own OUs would allow scripting to iterate through all users and ensure these two options are selected (this script could be scheduled). There are lots of examples of scripts to modify all users in an OU (eg. this one). This leaves the initial creation of users: either create from a template user (via copy in the AD tools) or this could also be scripted.
Overall this is a policy which goes against all good practice (changing passwords ensures leaked knowledge of passwords is invalidated), so you'll have to do some extra work to swim against the tide.