Force Password Change
Force password change is set in the
mdl_user_preferences table with the value
auth_forcepasswordchange. A value of 0 means a password change is not required while a 1 means the user will be forced to change their password. This value will typically not exist at all until a user is forced to change their password at least once.
If you ever need to bulk-force password change across all users in the system (e.g. for security reasons), you can add the
auth_forcepasswordchange option to the
mdl_user_preferences with a value of 1 if it doesn't exist, or simply update it from 0 to 1 if it does. Remember this is only relevant to internal authentication methods such as the default
manual authentication method.