My apology.
I think this is not what you are looking for. More clarity here. The command previousely mentioned will expire an existing password in a specified period of time but then prompt a user to change a new password. The user will be able to continue to login with the new password.
If you want to invalidate a password, I think a timer-based UPM script would be an option.