I found a solution to my original question.
At first you can set up the 90-day-expiration policy like I did.
sudo pdbedit -P "maximum password age" -C *time-in-seconds*
Then in order to make the user change his password at first login just type
sudo net sam set pwdmustchangenow *user* yes
The problem I'm having now is that Windows does not allow a user to change their password. It only alerts them that they need to change their password. I'm posting a new question about this new error.