Thank you Kenyy for your reply.
The AD accounts are created using Provisioning and Account templates.
The user is created having the status "16777216" to push him change his password after his first logon.
However, even if the user is enabled now (After he has changed his password), the userAccountControl keeps the value 544.