powershell

user password reset + force reset at next logon

Set-ADAccountPassword sophie -Reset -NewPassword (Read-Host -AsSecureString -Prompt 'New Password') -Verbose

Set-ADUser -ChangePasswordAtLogon $true -Identity sophie -Verbose

force GPO Sync immediately (local machine)

gpupdate /force