How is that done?

Do I issue a standard expired password to all users with grace logins of 1?

Thanks

Seb