def findUser(login):
        """
        param name: login
        return: dn of user
        """
    userDN = None
    base = "CN=my,CN=domain"
    search_filter = '(&(objectClass=user)(sAMAccountName=%s))'% (login)
    x = conn.search(base, search_filter,attributes=['distinguishedName'])
    if x != False:
        userDN = conn.response[0]['attributes']['distinguishedName']
    conn.unbind()
    return userDN

def changepass(login, newpass):
        """
        :param login: user's login
        :param newpass: default password, usually 123456
        """
        dn = findUser(login)
        reset_cmd = 'dsmod user "{dn}" -pwd {newpass} -mustchpwd yes'.format(dn = dn,
                                                   newpass = newpass)

        app = "cmd /C {0}".format(reset_cmd)

        cmd = "{exe} \\{host} -u {domain}\{user} -p {password} {app}".format(
                                    exe = config['psexec'],
                                    host = config['host'],
                                    domain = config['domain'],
                                    user = config['user'],
                                    password = config['secret'],
                                    app = app)
        res = subprocess.Popen(cmd, shell = True)