don't think you can-
Been a while since i set mine up- so yours may differ.
If you have self-recovery enabled, they can self recover (from options) and create their new password.
Menu- Data Protection- Encryption Recovery.
They have to do recovery- administrator recovery and read out the long code- then you put that into the console and then select "user recovery- reset token" give them the next code, and this should get them to reset their passsword and ask them to reset their self recovery questions.
You could also run the EE: Users Query and select the users you want to reset the token on and then click Actions > Reset Token. This works for EPO 4.5 and I am using EEPC 6.1.0.