User fail to login after password reset by admin in Azure AD with on-premise AD

Question

When user sign-in with the reset password, system display "Update your password" : "You need to update your password because this is the first time you are signing in, or because your password has expired."
User proceed to change the password will display error message "Your organization doesn't allow you to update your password on this site. Please update it according to the method recommended by your organization, or ask your admin if you need help."
This Azure AD have been connected to on-premise AD before, but the on-premise AD can't be connected.
Any idea to solve this problem? Thanks.

Answer 1

I finally had to fix the problem by recreating the on-premise AD again and sync the account to solve the problem.

Answer 2

As the AAD Connect is not working any more, you may go for disabling the SSPR from the Azure Portal
The document explain, how to enable the feature in Azure portal. You can follow the steps and disable the feature in the below document
tutorial-enable-sspr-writeback

Answer 3

I am not seeing a reference to fix the issue without an Azure AD connect installation. I am proposing the following cmdlet to see if it helps. The script is basically to disable SSPR through PowerShell

$ADconnector = (Get-ADSyncConnector | Where-Object {$_.Name -like "*AAD"}).Name

Set-ADSyncAADPasswordResetConfiguration -Connector $ADconnector -Enable:$False

Answer 4

Help to reset my admin password.