[Samba] Forcing password changes using SAMBA as PDC

[Andreas]

On Tue, Jul 15, 2003 at 11:58:07AM +0000, Andrew Bartlett wrote:
> This works directly in Samba 3.0 (as in, Samba enforces this itself).
> 
> IN Samba 2.2, you configure PAM for terminal logins, then set 'obey pam
> restrictions = yes' (on a PAM enabled build, naturally) and make the same 
> config in /etc/pam/samba.

(old message, I know, sorry)

But using PAM would require one to disable encrypted passwords, right?

Put in another way, is it possible with current samba 2.2, and encrypted
passwords, to force a windows client to change password upon first login? 
Or periodically?