enable self service password reset office 365

When setting 'Unexpire Password' permissions in Active Directory, it must be applied to This object and all descendant objects, This object only, or All descendant objects, or the 'Unexpire Password' permission can't be displayed. If you don't assign these permissions, writeback may appear to be configured correctly, but users encounter errors when they manage their on-premises passwords from the cloud. Extended rights for 'Unexpire Password' on the root object of each domain in that forest, if not already set.The following permissions and options must be set on the account: The account that you need to add permissions to is listed under Synchronized Directories. If you're not sure which account is currently in use, open Azure AD Connect and select the View current configuration option. To correctly work with SSPR writeback, the account specified in Azure AD Connect must have the appropriate permissions and options set. You typically install Azure AD Connect on a Windows Server 2016 or later computer that's joined to the on-premises AD DS domain. To use password writeback, domain controllers can run any supported version of Windows Server.Ĭonfigure account permissions for Azure AD ConnectĪzure AD Connect lets you synchronize users, groups, and credential between an on-premises AD DS environment and Azure AD.If needed, configure Azure AD Connect using the Express or Custom settings.An existing on-premises AD DS environment configured with a current version of Azure AD Connect.If needed, complete the previous tutorial to enable Azure AD SSPR.Azure AD configured for self-service password reset.An account with global administrator privileges.

For more information, see Licensing requirements for Azure AD SSPR.A working Azure AD tenant with at least an Azure AD Premium P1 or trial license enabled.To complete this tutorial, you need the following resources and privileges: Enable password writeback in Azure AD SSPR.Enable the password writeback option in Azure AD Connect.Configure the required permissions for password writeback.

Enable self service password reset office 365