You can set the userAccountControl AD property (with Update AD Object activity or Run Powershell) so that the 544 - PASSWD_NOTREQD flag is not set.

We normally set the userAccountControl of each new account to this:

• 8389120 - Password Expired, Normal Account