You have to run the ORAPWD Utility to change the password but this is not sufficient you also have to do the following

Go To
start >> programs >> Administrative Tools >> User Manager For Domain

You will have a group i.e ORA_DBA you just Remove its all member and see will it work or not?

It should work.