question

MIndraRuslan-8520 avatar image
0 Votes"
MIndraRuslan-8520 asked joyceshen-MSFT commented

Remove Change password on OWA office 365

Hi,

We're using Office 365 and remote users used online outlook and they often change the password.
Is there a way to remove the change password on outlook online?

Thanks

office-exchange-online-itpro
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

No, why the need to do this?

0 Votes 0 ·

Is it possible by assigning a special RBAC where password policy is removed ?

0 Votes 0 ·

Maybe, but they can still change through the Azure portal I would think. Seems like a bad idea though lol

1 Vote 1 ·
Show more comments
AndyDavid avatar image
0 Votes"
AndyDavid answered

As I mentioned above, you can't prevent all the ways a user can change their password. It wont prevent users from changing it in the Office portal which redirects to:
https://myaccount.microsoft.com/

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MIndraRuslan-8520 avatar image
0 Votes"
MIndraRuslan-8520 answered AndyDavid converted comment to answer

Hi Andy,

Sometimes they forget the password or the password too short.

Thanks

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndyDavid avatar image
0 Votes"
AndyDavid answered

Ok, well, there really isnt a way to completely get rid of that now.
I would look to using passwordless auth if possible:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

joyceshen-MSFT avatar image
1 Vote"
joyceshen-MSFT answered joyceshen-MSFT commented

Hi @MIndraRuslan-8520

Like the discussion above, if they are cloud only users, we could try the below steps to prevent them from doing this from OWA:
Disable Password Changing Option in OWA - Office 365

Add a new Management role called “AllButPasswordChange”

 New-ManagementRole -Name AllButPasswordChange -Parent MyBaseOptions

Run the below command to see if the management Role is added to Management role Entry

 Get-ManagementRoleEntry AllButPasswordChange\Set-Mailbox

Remove that specific parameter Password

 Set-ManagementRoleEntry AllButPasswordChange\Set-Mailbox -Parameters Password –RemoveParameter

Create a new RoleAssignmentPolicy, which will include the AllButChangePassword

 New-RoleAssignmentPolicy AllButPasswordChange
 New-ManagementRoleAssignment -Role AllButPasswordChange -Policy AllButPasswordChange

Assign the new role to user

 Get-Mailbox "XXX" | Set-Mailbox -RoleAssignmentPolicy AllButPasswordChange


If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Joyceshen,

Thanks for your information.
Let me try that and I will reply you.

Thanks

0 Votes 0 ·

Hi Joyceshen,

I have tried, I sign in with outlook.office.com and I'm able to change the password.
Is there a time lag for Office 365 to update roles?

Thanks

0 Votes 0 ·

Hi,

Yes, we could only disable this feature in OWA, not all in O365.

0 Votes 0 ·