Am 29.06.19 um 16:36 schrieb David Mehler via dovecot:

I've got an email server setup all with virtual users. There only interaction with it will be via a webmail interface in this case roundcube. What I'm wanting to do is set up automatic password change on first login. Would this be considered a dovecot or a roundcube issue?

There's $config['password_force_new_user'] for roundcube to cover that requirement. See plugins/password/config.inc.php.dist in any roundcube setup less than five years old.