需求：将指定OU的用户属性中“下次登陆时更改密码”启用。该选项启用后用户的密码即过期。
#Subject: Get the passwordexpired Property of the users and Set ChangePasswordAtLogon to yes.
#Date:2017/05/26
Import-Module ActiveDirectory
# 0 is Disable ChangePasswordAtLogon
# 1 is Enable ChangePasswordAtLogon
$Myou="OU=testou,OU=MY_USER,OU=Beijing,DC=CCTV,DC=China"
Get-ADUser -SearchBase "$Myou" -Filter * -Properties * | select Name,PasswordExpired,sAMAccountName | ForEach-Object { Set-ADUser -identity $_.sAMAccountName -ChangePasswordAtLogon 1 }
