ok so I have a way to do this...
first I downloaded unlock.exe from joeware.net
http://www.joeware.net/freetools/tools/unlock/index.htm
***click on download now to get the file***
next put it in the action directory and create this:
{actionpath}unlock.exe server {username}
and it works....if your not domain admin you may need to create a user group to only change passwords...
next I created a batch file to reset the user and make it so they must change the password on next login...
BATCH FILE BEGINS HERE ::::::
@echo off
echo Enter USER NAME
set /p user=
echo Enter PASSWORD
set /p pass=
net user %user% %pass% /DOMAIN
echo Password has been set....Now forcing to change on next login
net user %user% /DOMAIN /logonpasswordchg:yes
pause
::::::::::
I had it pause to make sure it works...