Can anyone here help me with Gsuite for a school, and issues with password sync?

I work with a school that just subscribed to Gsuite for Schools. We have an existing AD domain where we hold the teachers and students and admin staff in separate OUs as is standard practice, ~150 users in total). I successfully set up the Google Cloud Directory Sync and was able to sync all of my existing users to Google without issue. I also installed Gsuite password sync and then instructed all of my users to change their passwords via their Windows password, forcing the new passwords to be synced to the Google account. Again, that all worked seamlessly. Existing users we able to log into Google without issue once they had changed their domain passwords.

Since I had set this all up, I have created two new accounts in active directory. I created the AD user by copying another, gave them exchange addresses in our on prem 2010 box, and then kicked off GCDS to sync their account to Google. The sync worked without issue. BUT...When those new users initially logged into their Google accounts, they were prompted to change their passwords with Google, something I do NOT want them to do.

I was able to replicate this by creating two new test users in AD, one where I checked the box to force the user to change their password upon initial login, and one where I did NOT check that box to do so, thinking that might have something to do with it. I synced them up to Google, and upon initial login to Google BOTH users are being required to update their passwords with Google... What am I doing wrong?

I am about to create ~50 new users and force the change of password for another 75 (updating students), and I REALLY don't want to have a situation where I have to manually update all of the passwords in gsuite!