Mobile accounts? Local accounts?
They are local accounts on macbooks that the students have to create a personal password for when setting up. We do not have control over what they set the password, and have no way of remote changing that password. We cannot change that password through command line on the device either, unless there is another local admin account on the mac that we have access to.
Then the easiest way to do that is to reboot the Mac to recovery mode. Open terminal and type resetpassword
You can setup a management account with a password. Incase students forget their password, you can login with that management account and reset their password. We have Sophos encryption for all our Macs. Incase user forgets their password, they can reset it by entering Sophos recovery pin.
Looking ahead, I think you will find it quite useful to have a uniform local admin account on every Mac. It can be used for access, recovery, troubleshooting, app installation etc. The password can be changed via Jamf for security. Please note this is different from the Jamf management account.