I didn't see a list of account attributes in the Administrator Guide, so I did the following:
zmprov ga account >/tmp/account.profile 2>&1
Does this output all the attributes, or only the attributes that are set/have data?
The reason I ask, I ran the above before and after setting the checkbox to force a password change, and the difference between the two files was the following:
zimbraPasswordMustChange: TRUE
Can any attribute be changed using zmprov?