Force Active Directory password change for multiple users

To set the exiration date for all users in certain OUs to 5 days ago:

“OU=Sales,OU=New York,dc=internal,dc=AcmeCorp,dc=com” | dsmod user -acctexpires -5

Powershell to force password change for all users in a certain OU:

$users = Get-ADUser -Filter “*” -SearchScope Subtree -SearchBase ‘DC=contoso,DC=com’
$users | Set-ADUser -ChangePasswordAtLogon $true

You may have to remove the Password Never Expires option and the User Cannot Change Password

$users | Set-ADUser -CannotChangePassword $false
$users | Set-ADUser -PasswordNeverExpires $false