CA11 user and expired credentials

[DavidHull]

Hello all.
We're getting to the point with our routine here, where we can look into repetative failures of reports on the Portal.
One of the ones we see often is this::
CM-REQ-4159 Content Manager returned an error in the response header. The error "cmAuthenticateFailed CM-CAM-4005 Unable to authenticate. Check your security directory server connection and confirm the credentials entered at login." can be found in the response SOAP header. CM-REQ-4342 An error occurred with the client.

We've come to understand that at some point, the user has recently changed their NT Password while they had the Cognos Portal open in an active session.
Their new credentials were not updated on the Portal, so any schedules after that point fail on authentication.

It's easy enough to send an email out to the user with the steps necessary for them to "renew their credentials", but we are wondering if there is a programmatic approach to doing that (in an automated manner)

We are currently on CA11.0.11 on Windows Server 2012 R2, but we've been handling this issue since about CA11.0.7

Any suggestions on how we can proactively and programmatically reset those creds for our users?
Thanks as always for your time.
-D.