Remove Change password on OWA office 365

Question

Hi,

We're using Office 365 and remote users used online outlook and they often change the password.
Is there a way to remove the change password on outlook online?

Thanks

Answer 1

As I mentioned above, you can't prevent all the ways a user can change their password. It wont prevent users from changing it in the Office portal which redirects to:
https://myaccount.microsoft.com/

Answer 2

Hi @M Indra Ruslan

Like the discussion above, if they are cloud only users, we could try the below steps to prevent them from doing this from OWA:
Disable Password Changing Option in OWA - Office 365

Add a new Management role called “AllButPasswordChange”

New-ManagementRole -Name AllButPasswordChange -Parent MyBaseOptions  

Run the below command to see if the management Role is added to Management role Entry

Get-ManagementRoleEntry AllButPasswordChange\Set-Mailbox  

Remove that specific parameter Password

Set-ManagementRoleEntry AllButPasswordChange\Set-Mailbox -Parameters Password –RemoveParameter  

Create a new RoleAssignmentPolicy, which will include the AllButChangePassword

New-RoleAssignmentPolicy AllButPasswordChange  
New-ManagementRoleAssignment -Role AllButPasswordChange -Policy AllButPasswordChange  

Assign the new role to user

Get-Mailbox "XXX" | Set-Mailbox -RoleAssignmentPolicy AllButPasswordChange  

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Hi Andy,

Sometimes they forget the password or the password too short.

Thanks

Answer 4

Ok, well, there really isnt a way to completely get rid of that now.
I would look to using passwordless auth if possible:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless

Answer 5

New-ManagementRole -Name AllButPasswordChange -Parent MyBaseOptions

Get-ManagementRoleEntry AllButPasswordChange\Set-Mailbox

Set-ManagementRoleEntry AllButPasswordChange\Set-Mailbox -Parameters Password –RemoveParameter

New-RoleAssignmentPolicy AllButPasswordChange

New-ManagementRoleAssignment -Role AllButPasswordChange -Policy AllButPasswordChange

Get-Mailbox "XXX" | Set-Mailbox -RoleAssignmentPolicy AllButPasswordChange

These commands do not work

Still able to change password in OWA

It's silly how there is no way to achieve such a small thing

There are cases where multiple users need to share a single UserMailbox and sometimes they feel like changing password and not informing anyone which can cause a lot of disruption.