A systems administrator needs to reset a user's password because the user forgot it. The systems administrator creates the new password and wants to further protect the user's account. Which of the…

Requiring the user to change the password at the next login ensures that only the user knows their final password, preventing the administrator from knowing the long-term password and improving the account's security posture. This practice minimizes the risk of the temporary password being misused.

Disallowing the user from changing their password would prevent them from securing their own account and contradict best security practices.

Disabling the account would prevent the user from accessing resources, which is not the goal when merely assisting with a forgotten password.

Choosing a password that never expires is a poor security practice, as it increases the risk of the password being compromised over time without a mandatory refresh.