Hello i created taskpads for remote admins to reset passwords for folks at their site.I created a group for admins and gave delegation on site OU. The problem is for doing "force change password on next logon", there are certain permissions on user objects which needs enabled. So i enabled "ReadPWDLastSet" and "WritePWDLastSet" as well as "Password Reset" on user objects for admin group. Unfortunately when the right click on the user, the "User must change password on next logon" is greyed out, but in User Properties->Account tab, "User must change password on next logon" is not greyed out and they can select it. Why is it happening what attributes they need to have it enabled when they do "Right Click and reset password.".
Sorry if question is too long, but let me know of any clarifications needed.Thank you.