I have a small 2003 Netowrk and XP sp2 clients. I open active directory and go to a users profile and check the box that says “User must change password at next login” but the user is not asked to change their password at next login. It is not until the user logs in once then logs out then logs in again that it asks the user to change password. It does not matter if the user waits 5 minutes or 5 days. It does not matter if the user is an admin or regular user. It does not matter if the user is in an OU with Group policy or not. The AD does not force the password change on the next login but will after the user logs in and out once then it works. It also won’t run the users login script after the check box for “Change password” is checked.
