That enforces my first thought - that an enforced password change is only for admin.

~ Le Messor
"Each problem that I solved became a rule which served afterwards to solve other problems."
~ Rene Descartes