Do we have the ability to set the password to never expire or the user must change the password at the next login?
Yes, there is a rule that allows you to define an expression for the Password Never Expires value in AD.
Set the expression to true (or the result of the expression returns true) and the users Password will never expire.
This rule only applies when provisioning a user account.
