Windows self service password reset

You can enable password writeback using the Azure portal. You can also temporarily disable password writeback without having to reconfigure Azure AD Connect. By default, Azure AD unlocks accounts when it performs a password reset. To provide flexibility, you can choose to allow users to unlock their on-premises accounts without having to reset their password.

Use this setting to separate those two operations. If you use a third-party password filter to enforce custom password rules, and you require that this password filter is checked during Azure AD self-service password reset, ensure that the third-party password filter solution is configured to apply in the admin password reset scenario.

Password reset and change are fully supported on all business-to-business B2B configurations. B2B user password reset is supported in the following three cases:. If they have an alternate email or authentication email defined, password reset works as expected. Microsoft accounts that have been granted guest access to your Azure AD tenant, such as those from Hotmail.

They need to reset their password by using the information found in the When you can't sign in to your Microsoft account article. Skip to main content.

This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Is this page helpful?

Please rate your experience Yes No. Any additional feedback? Important This conceptual article explains to an administrator how self-service password reset works. Note SSPR may send email notifications to users as part of the password reset process.

System Requirements Supported Operating System. Install Instructions Download these rollout materials and customize them with your organization's branding. Then, distribute them to your users during your self-service password reset rollout to educate users about the feature and remind them to register.

Follow Microsoft Facebook Twitter. New self-service password reset functionality coming soon. Register for Self-Service Password Reset. Register for Two-Step Verification. Reminder to register for Self-Service Password Reset. Self-service password reset available now. Self-Service Password Reset coming soon. Self-service password reset is coming. Self-service password reset is here. After successful authentication, the user will be given two options, either unlock the account and keep the current password or to set a new password.

Users can open a web browser, navigate to the Password Reset Portal and enter their username and click Next. When a user answers the phone, he will be asked to press the pound key on the phone. The user will have to choose if he wants to reset his password or unlock his account. If he chooses to unlock his account, the account will be unlocked. After successful authentication, the user will be given two options, either to keep his current password or to set a new password.

If the user chooses to reset their password, they will have to type in a new password twice and click Next to change the password. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Is this page helpful? Please rate your experience Yes No.

Any additional feedback? Feedback will be sent to Microsoft: By pressing the submit button, your feedback will be used to improve Microsoft products and services. Privacy policy. Typically, users open a web browser on another device to access the SSPR portal.

To improve the experience on computers that run Windows 7, 8, 8. If your IT team hasn't enabled the ability to use SSPR from your Windows device or you have problems during sign-in, reach out to your helpdesk for additional assistance.

To configure a Windows 10 device for SSPR at the sign-in screen, review the following prerequisites and configuration steps.

Deploying the configuration change to enable SSPR from the login screen using Intune is the most flexible method. Intune allows you to deploy the configuration change to a specific group of machines you define. This method requires Intune enrollment of the device.

Sign in to the Azure portal and select Intune. The policy can be assigned to specific users, devices, or groups.