Forcing a change every x number of days is annoying, but there should be an admin option to force a one-off change in cases such as these. So the user goes onto the site, and is immediately asked to update his password.