/GENERATE_PASSWORD[=keyword]
       /NOGENERATE_PASSWORD (default)

    Invokes the password generator to create user passwords.
    Generated passwords can consist of 1 to 10 characters. Specify
    one of the following keywords:

    BOTH       Generate primary and secondary passwords.

    CURRENT    Do whatever the DEFAULT account does (for example,
               generate primary, secondary, both, or no passwords).
               This is the default keyword.

    PRIMARY    Generate primary password only.

    SECONDARY  Generate secondary password only.

    When you modify a password, the new password expires
    automatically; it is valid only once (unless you specify
    /NOPWDEXPIRED). On login, users are forced to change their
    passwords (unless you specify /FLAGS=DISFORCE_PWD_CHANGE).

    Note that the /GENERATE_PASSWORD and /PASSWORD qualifiers are
    mutually exclusive.