title: How to force user to change password at next logon with ldap3 python module?
body: <p>I'm using ldap3 to create a user account in Active Directory (Win 2012R2) with python script. The only one attribute I can't set is "User must change password at next logon". Could you suggest a way to get this checkbox marked right after using creation? I tried to change UserAccountControl and pwdLastSet attributes but no luck(</p>
  
  <p>-1 is the only one valid parameter</p>
  
  <pre><code>password_expire = {"pwdLastSet": (MODIFY_REPLACE, [-1])}
  connect.modify(dn=user_dn, changes=password_expire)
  </code></pre>
  
  <p>PASSWORD_EXPIRED    0x800000    8388608</p>
  
  <pre><code>password_expire = {"UserAccountControl": (MODIFY_REPLACE, [8388608])}
  connect.modify(dn=user_dn, changes=password_expire)
  </code></pre>