How to reset domain password without connecting to domain

Question

My environment has multiple domains and users connect to those domains using VPN. Now if their password in these domains expire or if they forget their passwords then there is no way for them to reset their passwords. Is there any solution that can solve this situation ?

*Note: user's laptop is not connected to those domains

Answer 1

anonymous user

Thank you for posting your question on Microsoft Q&A

If these users are available only in on-premises domain, then there is no option for users to change/reset the password without connecting to your on-premiese environment with VPN.

If users are synced to Azure AD using AD connect, then there is an option (SSPR - Self-service password reset) in Azure AD, that users can use and have their password change/reset.

This feature allows users to change/reset their password from cloud via internet. This password will be picked using AD connect and will be written back to on-premises. This way even on-premises password will also get changed/reset.

To know more about AD connect and SSPR you can refer below articles,
AD connect -- https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect
AD connect installation -- https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express

SSPR -- https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment
Enabling SSPR -- https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

Do let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.