Disable SSPR for Indiviaul Admin Accounts

Question

question

HRaja-6229 asked Mar 9, '22 JamesTran-MSFT commented Mar 9, '22

Disable SSPR for Indiviaul Admin Accounts

I have seen this comment below mentioned here:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-reset-policy-differences

You can disable the use of SSPR for administrator accounts using the Set-MsolCompanySettings PowerShell cmdlet. The -SelfServePasswordResetEnabled $False parameter disables SSPR for administrators.

Instead on disabling SSPR for all admin accounts, is it possible to disable SSPR to induvial admin accounts?

azure-active-directory azure-ad-sspr

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-09T14:33:46.093Z

AndyDavid answered Mar 9, '22 JamesTran-MSFT commented Mar 9, '22

You can't disable SSPR for Admins:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/active-directory-passwords-faq#can-i-block-users-from-resetting-their-password--

image.png (22.9 KiB)

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JamesTran-MSFT · Mar 09 at 05:05 PM

@HRaja-6229
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 ·

question