Can a user reset their own AD password from the console?

[pryan67]

If not, any suggestions on how to enable that? It would be good to have a self-service portal for that sort of thing.

[CyberCitizen]

Are you referring to end users / staff being able to reset their password vs say support staff?

[pryan67]

CyberCitizen wrote:
Are you referring to end users / staff being able to reset their password vs say support staff?

I was hoping to allow end users to do so. Although they can change it using Windows as normal, this would be easier for them. No more excuses for expired passwords 🙂

[CyberCitizen]

pryan67 wrote:

CyberCitizen wrote:
Are you referring to end users / staff being able to reset their password vs say support staff?

I was hoping to allow end users to do so. Although they can change it using Windows as normal, this would be easier for them. No more excuses for expired passwords 🙂

I don't believe that would work as the end user would need admin rights to be able to reset their password. The other issue is if their account is locked out, how can they access the network resource?

You would need to look as something that allows the users to reset their password at the login screen.

Something like this https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-sspr-windows

[Esben_D]

It is possible, yes.

Just make sure the user has permissions to view and run basic actions and then configure which actions are basic for you in Configuration\User Pages and Configuration\Asset Pages.

One side note is that the user will need asset management access, since the basic action permission falls under asset management access. At a minimum, this means they will be able to view assets and reports, aside from running basic actions on users and assets.

[pryan67]

Esben.D wrote:
It is possible, yes.

Just make sure the user has permissions to view and run basic actions and then configure which actions are basic for you in Configuration\User Pages and Configuration\Asset Pages.

One side note is that the user will need asset management access, since the basic action permission falls under asset management access. At a minimum, this means they will be able to view assets and reports, aside from running basic actions on users and assets.

Thank you for the prompt reply.

I don't know that it's worth the potential trouble to give them access to reports and running actions against other users and assets.