This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 47%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
How would I go about force resetting passwords when our users are working from home? We currently use a VPN to connect our users to our network when they are working from home, and now that we are trying to tighten up security we need to go about forcing a password reset on a regular basis.
Hello,
You can control access based on Conditional Access policy.
--> Control user access based on their physical location: if the user is connected from "non-trusted location" (outside the organisation network), you can configure "Grant Access" + "Require password change"
Regards,
Rami KETATA
// If the response is helpful, please click "Accept Answer" //
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 35%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZM%3C/text%3E%3C/svg%3E)
@Kian McKenna, Thanks for posting in Q&A.
From your description, I know you are looking for a way to force resetting password when users are working from home.
Based on my researching, there is no direct way in Intune to force resetting password when users are working from home. However, we can deploy a PowerShell script via Intune to force users to reset password when they next login in device or we can create a password policy and set the password expiration time and force users to change password out of the password expiration.
https://cloudinfra.net/enable-disable-user-must-change-password-at-next-logon-using-intune/
https://howtomanagedevices.com/intune/2409/password-policies-using-intune/
Non-official, just for reference.
Hope above information can be helpful.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Kian McKenna, Hope things going well.
If there is any update, feel free to let me know.
@ZhoumingDuan-MSFT Hi, we've done some testing and worked out that it's just easier if we only allow users to password reset when on site (not connected via VPN). Is there any way to specify which users we choose to reset password based on their IP address? In simple terms, we would only want users to be able to reset their password whilst connected to our network on site (can be determined via IP).
@Kian McKenna, Thanks for your update.
Based on my researching, there is no feature in Intune can specify which users to reset password based on their IP address.
However, it may need to develop a script to achieve this, you can contact PowerShell support to get more help.
Thanks for your kind understanding.