After searching samba mailing lists and web for ways to do this it seems that
pdbedit --pwd-must-change-time=(0 or current time) 'username'
should do the trick (the man file for pdbedit or the samba manual does not mention how to do this).
But finally
net sam set pwdmustchangenow yes
worked for me!
thanks to Chris Smith
