Password change after expire with Cisco ASA to local FR user DB (text file) Not Working

[Will Richmond]

Thx alan, I found/read read the docs, but still trying to determine this: Which config file contains this setting:

To actually force a client to change passwords, you must set the expiry bit in the SMB-Account-Ctrl value - for example:

 update control {
  # U == user
  # e == expired
  SMB-Account-Ctrl-Text := '[Ue]'
}

and how can i control this on a per user basis in teh users file? IOW, i dont want to force everyone to change their password. so there must be some sort of per-user flag to configure in the users file?