Checkbox in users table/form: "User must change password at next logon". Checked by default when new user is created or when password is changed by administrator. Standard behavior, after user logs in password must be changed before he can continue to the system.