I like to use the command passwd -d <user-ID> instead. This deletes the user's password, and then they are forced to select a new password. Same end result as you will get with TeleBOYWONDER's instructions, but in fewer steps.
Susan
"People seem not to see that their opinion of the world is also a confession of their character."
Ralph Waldo Emerson (1803 - 1882)