Active Directory Change Password and Deactivated Status
<p>I have a Powershell script which creates new Active Directory accounts in either an enabled or disabled state. When enabled, the user must change the password at next logon. When disabled, it removes this requirement. How can I create a disabled user with the box for must change password still checked? The option still needs to be checked as it is used for internal audits to detect tampering.</p>

<p>Code:</p>

<pre><code>-Enabled $Decision -AccountPassword $Password -ChangePasswordAtLogon $true

$Status = $Line.'Account Status'
    $Decision = $false
    if ($Status -eq 'Enabled') { $Decision = $true }
</code></pre>