As I mentioned above, you can't prevent all the ways a user can change their password. It wont prevent users from changing it in the Office portal which redirects to:
https://myaccount.microsoft.com/
Remove Change password on OWA office 365
Hi,
We're using Office 365 and remote users used online outlook and they often change the password.
Is there a way to remove the change password on outlook online?
Thanks
-
Andy David - MVP 142.3K Reputation points MVP
2021-07-21T16:00:00.153+00:00
4 additional answers
Sort by: Most helpful
-
Joyce Shen - MSFT 16,646 Reputation points
2021-07-21T02:21:47.92+00:00 Like the discussion above, if they are cloud only users, we could try the below steps to prevent them from doing this from OWA:
Disable Password Changing Option in OWA - Office 365Add a new Management role called “AllButPasswordChange”
New-ManagementRole -Name AllButPasswordChange -Parent MyBaseOptions
Run the below command to see if the management Role is added to Management role Entry
Get-ManagementRoleEntry AllButPasswordChange\Set-Mailbox
Remove that specific parameter Password
Set-ManagementRoleEntry AllButPasswordChange\Set-Mailbox -Parameters Password –RemoveParameter
Create a new RoleAssignmentPolicy, which will include the AllButChangePassword
New-RoleAssignmentPolicy AllButPasswordChange New-ManagementRoleAssignment -Role AllButPasswordChange -Policy AllButPasswordChange
Assign the new role to user
Get-Mailbox "XXX" | Set-Mailbox -RoleAssignmentPolicy AllButPasswordChange
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
-
M Indra Ruslan 241 Reputation points
2021-07-20T13:11:09.01+00:00 Hi Andy,
Sometimes they forget the password or the password too short.
Thanks
-
Andy David - MVP 142.3K Reputation points MVP
2021-07-20T13:51:14.537+00:00 Ok, well, there really isnt a way to completely get rid of that now.
I would look to using passwordless auth if possible: -
.Giancarlo7 0 Reputation points
2023-02-08T01:48:32.8133333+00:00 New-ManagementRole -Name AllButPasswordChange -Parent MyBaseOptions
Get-ManagementRoleEntry AllButPasswordChange\Set-Mailbox
Set-ManagementRoleEntry AllButPasswordChange\Set-Mailbox -Parameters Password –RemoveParameter
New-RoleAssignmentPolicy AllButPasswordChange
New-ManagementRoleAssignment -Role AllButPasswordChange -Policy AllButPasswordChange
Get-Mailbox "XXX" | Set-Mailbox -RoleAssignmentPolicy AllButPasswordChange
These commands do not work
Still able to change password in OWA
It's silly how there is no way to achieve such a small thing
There are cases where multiple users need to share a single UserMailbox and sometimes they feel like changing password and not informing anyone which can cause a lot of disruption.