How to create an access template for a delegated administrator to force users to change password on next logon (153517)

Use the following steps to create an access template to allow a delegated administrator to force user's to change the password at next logon:

1. Launch the ActiveRoles Server MMC console
2. Navigate to the following: Configuration | Access Templates
3. Right-click on the Access Templates container and select New | Access Template
4. Provide a name for the access template such as, "Allow - Force password change at next logon"
5. Click Add, select Only the following classes and check off User, click Next
6. Select Object property access, check off Read properties and Write properties, click Next
7. Select The following properties and check off Show all possible properties, check off User Must Change Password At Next Logon, click Finish
8. Click Next and then Finish

Once the access template is created, it can be assigned to the appropriate scope and users/groups to allow access to the 'Force password change at next logon' for user accounts