Please try the following
Step 1: Go to User Management -> Credential Policy; create a new credential policy (e.g. "Change Password")
Step 2: Go to User Management -> End User -> Edit Credential; change the Authentication Rule to the newly created Credential Policy
Step 3: Check 'User Must Change at Next Login'
Step 4: Uncheck 'Does Not Expire' if it is checked.
Step 5: Log out of CCMAdmin, and log in with the CCMUser you just altered
Now the user will be prompted with a 'Logon Status' message that states:
'Your password must be changed, please enter a new password', and there are 2 fields to enter and confirm a new password.