In this post, we explore ForceChangePassword Active Directory abuse via the exploitation of Discretionary Access Control Lists (DACL) using the ForcePasswordChange permission in Active Directory