All,
 
My company is currently in the process of getting SSAE16 certified, and it has been pointed out that our passwords process in not secure enough.  I was wondering if there is a way to force a user to change their password after the first time they log in.  Thanks.