I know the answer is simple, but I'm having a brain fart. In Active Directory on Server 2012 R2 Standard, I as a domain administrator cannot check the box requiring a user to change his password at next logon while resetting his password. It's grayed out.
I am trying to delegate access to an OU so that Help Desk users can reset passwords (done) and force the user to set a new one on logon (not done). In troubleshooting it, I realized that not even a domain admin can do it!
What has to be changed to get this box to be clickable?