How to Enable Self-Service Password Reset for a Microsoft 365 User
Question details
Microsoft 365 users are unable to reset their passwords independently and require administrator configuration to enable the self-service reset feature.
- Product
- Microsoft 365 / Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- An administrator needs to configure the Microsoft 365 tenant settings so that employees can securely reset their own account passwords.
- Observed behavior
- Users receive an error message stating that password reset is not allowed because the self-service password reset setting is not fully enabled in the directory.
Ensure you are logged into the Microsoft 365 admin center with Global Administrator or Privileged Authentication Administrator credentials before attempting to modify these security settings.
Enable SSPR via Microsoft Entra Admin Center
Configure the directory settings in Microsoft Entra ID (formerly Azure AD) to allow all users or specific groups to use the self-service password reset feature.
Self-Service Password Reset (SSPR) is a Microsoft Entra ID feature that allows users to reset their passwords without administrator intervention. If it is turned off, users will be blocked from resetting their passwords even if the organization expects it to be active.
Log in to the Microsoft 365 admin center. In the left navigation pane, go to 'Settings', click on 'Org settings', select 'Security and privacy', and then choose 'Self-service password reset'.
Click the provided link to go to the Microsoft Entra admin center, which manages the underlying directory and security settings for Microsoft 365.
In the Microsoft Entra admin center, select 'Users' from the left-hand menu, then click on 'Password reset' to open the configuration panel.
Under the 'Properties' page, locate the 'Self-service password reset enabled' setting. Choose 'All' to enable it for the entire organization, or choose 'Selected' to apply it only to a specific security group.
Save your changes. Ensure your users have registered their required authentication methods (like a phone number or alternate email), then test the reset process with a separate, non-admin account.
Looking for a Simpler, Lightweight Office Solution?
Managing enterprise Microsoft 365 environments and admin centers can be complex and costly. If you or your team just need powerful, easy-to-use office software without the heavy IT administration, try WPS Office. It provides a comprehensive suite of productivity tools that are highly compatible with Microsoft formats, completely free for basic use.
- 1. Download the Installer: Visit the official WPS Office website and download the free installer for your specific operating system.
- 2. Install WPS Office: Run the setup file and follow the quick on-screen instructions to complete the installation in minutes.
- 3. Start Creating: Launch the application and immediately start working with your existing Microsoft Office documents without any formatting loss.
Frequently Asked Questions
Why do users still see an error after I enable Self-Service Password Reset?
Even after SSPR is enabled globally, individual users must register their authentication methods (such as a mobile phone number or an alternate email address) at 'mysignins.microsoft.com'. If they have not set up these verification methods, the system cannot authenticate them for a reset.
Can I enable SSPR for just a small pilot group of users?
Yes. In the Microsoft Entra admin center under the 'Password reset' properties, select 'Selected' instead of 'All'. You can then assign a specific security group. Only the users within that pilot group will be allowed to reset their own passwords.
Does Microsoft 365 SSPR work for users synced from an on-premises server?
Yes, but it requires additional configuration. You must enable the 'Password writeback' feature in Microsoft Entra Connect so that cloud password changes are synced back to your local server. This specific feature requires a Microsoft Entra ID Premium P1 or P2 license.
