disable self service password reset in Azure AD

Question

I'm struggling to disable the self-service password reset to the tenant users. When trying to do a password reset they are asked to verify/enroll 2FA using a phone nr. and a verified e-mail(I want to disable the personal e-mail verification too).

After successfully verifying both steps they can reset their password. The setup in Azure AD for password reset is as follows:

Answer 1

Hi @Vlonjati , this is most likely due to Security Defaults: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

This thread has a lot of good information related to your question. I recommend looking through it and asking me any questions you may have!

If nothing here solved your issue please let me know and I can help you further.

If this answer helped you please mark it as "Verified" so other users may reference it.

Thank you,
James