Clarification and confirmation required for implementing the Azure Active Directory self-service password reset at the Windows sign-in screen?

Question

Clarification and confirmation required for implementing the Azure Active Directory self-service password reset at the Windows sign-in screen?

EnterpriseArchitect 6,041

I need some help and clarification on the steps for enabling the Azure Active Directory self-service password reset at the Windows sign-in screen.

Does both of the below steps are required to be executed or do I have to choose one over the other?

Using the Intune method: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-windows#enable-for-windows-11-and-10-using-microsoft-intune
Using the registry method: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-windows#enable-for-windows-11-and-10-using-the-registry

Any help would be greatly appreciated.

Accepted answer

0 additional answers

Your answer

Answer 1

Crystal-MSFT 53,991 Microsoft External Staff

@EnterpriseArchitect, Thanks for posting in Q&A. For the two methods, both can configure a Windows 11 or 10 device for SSPR at the sign-in screen. You can choose either of them to do it.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-08-16T05:53:11.4933333+00:00

@EnterpriseArchitect, Hope things are going well. I am writing to see if there's anything else we can help. If yes, feel free to let us know.
EnterpriseArchitect 6,041 Reputation points

2023-08-16T06:05:15.09+00:00

Hi @Crystal-MSFT ,
What happens if somehow the Computer that already has Intune Onboarded & Enrolled gets the Group Policy to enable the password reset?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-08-16T06:15:18.79+00:00

@EnterpriseArchitect, Thanks for the reply. The enrolled Intune device can still get group policy, if it has connection with Domain Controller. And if the same setting set via both group policy and Intune, the group policy will take precedence.
EnterpriseArchitect 6,041 Reputation points

2023-08-16T06:29:21.9066667+00:00

Thanks @Crystal-MSFT , so I assume there will be no issue when both methods are used and applied at the same time?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-08-16T06:47:38.85+00:00

@EnterpriseArchitect, Thanks for the reply. Although this, we still recommend using one method to do this. Based on my experience, deploy via both policies can cause troubleshooting complex.

Share via

Clarification and confirmation required for implementing the Azure Active Directory self-service password reset at the Windows sign-in screen?

0 additional answers

Your answer