The property you are looking for is 'zimbraPasswordMustChange' and set it to TRUE. We've done something similar a few times. We can do a 'for each' loop at the command line (assuming bash is the shell).
for each in `zmprov gaa`; do zmprov ma $each zimbraPasswordMustChange TRUE; done
I did this from memory, so please test!
Thanks,
Dusty