denvers/google-apps-script-reset-password.js

function forcePasswordResetForAllUSers() {
  try {
    
    var SKIP_USERS = ['some.user@example.com',
                      'john.doe@example.com',
                     ];

    var options = {
      domain: 'yourdomain.com',
      maxResults: 500, // TO-DO: implement pagination
      orderBy: "email"
    }

    var response = AdminDirectory.Users.list(options);
    
    response.users.forEach(function(user) {
      var userEmail = user.primaryEmail;
      
      if ( SKIP_USERS.indexOf(userEmail) > -1 ) {
        // Skip this user
        Logger.log("Skipping: " + userEmail);
        return;
      }
      
      Logger.log("Forcing password reset for: " + userEmail);
            
      // UNCOMMENT THE FOLLOWING THREE CODE LINES IF YOU WANT TO ***REALLY*** FORCE-RESET ALL PASSWORDS.
      // Note: running the script with the following lines still commented is akin to a DRY-RUN (you will still get an email as if the script was run for real, but nothing would have been changed)
      
      // Change password at next login -> true and save!
//    var userObject = AdminDirectory.Users.get(userEmail);      
//    userObject.changePasswordAtNextLogin = true;
//    AdminDirectory.Users.update(userObject, userEmail);      
    });      
    
    GmailApp.sendEmail(
      Session.getEffectiveUser().getEmail(), 
      'Log for User Pass Change Script: Successful', 
      Logger.getLog()
    );  
    
  } catch(e) {

    Logger.log('--------------------------------------------------------');
    Logger.log('Error occured: '+e.message);
    
    // Send an email to yourself with logs
    GmailApp.sendEmail(Session.getEffectiveUser().getEmail(), 'Log for User Pass Change Script : Error occured', Logger.getLog());
    
  }  
}