question

SkipHofmann-5788 avatar image
0 Votes"
SkipHofmann-5788 asked JamesHamil-MSFT answered

Azure AD force password change at next logon

Hello
Looking for a method or script that will force users to change there password in Azure AD at next logon

windows-server-powershellazure-ad-domain-services
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi, we are investigating your issue and will update you shortly.

Best,
James

0 Votes 0 ·

1 Answer

JamesHamil-MSFT avatar image
0 Votes"
JamesHamil-MSFT answered

Hi @SkipHofmann-5788 , you can use the MS Graph to force password reset.

To force reset the password on next login, update the account password profile using MS Graph Update user operation. The following example updates the password profile forceChangePasswordNextSignIn attribute to true, which forces the user to reset the password on next login.

 PATCH https://graph.microsoft.com/v1.0/users/<user-object-ID>
 Content-type: application/json
    
 {
 "passwordProfile": {
   "forceChangePasswordNextSignIn": true
 }

Once the account password profile has been set, you must also configure force password reset flow, which is described here.

If this answer helped you, please mark it as "Verified" so other users may reference it. Please let me know if you have any questions.

Thank you,
James




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.