I have noticed that it is common practice when setting up a user account (Windows users accounts and Google Apps user accounts in my case) to require new users to create their own password immediately after their first log on. In searching for an answer to this question, I have found many posts explaining how to require new users to change their password, but I can't find anywhere why this is considered "best practice." What problems are created if I generate and assign a unique password to each new user and they don't change it?
To clarify, I'm not asking why it is good practice to require users to change passwords periodically. My question is what are the risks if brand-new users keep using the password I set for them instead of creating their own password?
It would be convenient for me to have them keep their initial password because I am in a smaller business setting, and if I know their password I can set up Google Drive Sync and Google Apps Sync for them, instead of having to write instructions for them on how to do this themselves.