How to Set an Alert for Password Changes in Microsoft 365
Question details
The user needs to properly configure email notifications to alert them when an emergency administrator password is changed or reset.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Configuring security activity alerts to monitor administrative accounts for unauthorized or emergency password resets.
- Observed behavior
- Email notifications for password changes or resets fail to send, despite other security alerts (like sign-in alerts) functioning correctly.
Ensure you are signed in with Global Administrator or Security Administrator credentials, and verify that audit logging is fully enabled for your Microsoft 365 tenant.
Verify Tenant Alert Policies and Audit Log Configurations
Check your Microsoft Purview compliance portal to ensure that the password reset alert policy is active and correctly targeting your administrator accounts.
Activity alerts rely on the unified audit log to detect events. If audit logging is disabled or the specific alert policy is misconfigured, email notifications will not trigger even if the event occurs.
Sign in to the Microsoft Purview compliance portal using your administrator credentials.
Navigate to the 'Audit' section in the left pane and verify that audit logging is turned on for your organization.
Go to 'Policies' and select 'Alert policies'. Search for the policy related to 'Reset user password' or 'Changed password'.
Click on the policy to edit it. Ensure the 'Status' is set to 'On', the conditions correctly match your emergency admin accounts, and the designated recipient email address is accurate.

Contact Microsoft Support for Business Premium
If the tenant configurations are correct but emails still fail to send, escalate the issue to the Microsoft 365 Business support team for backend troubleshooting.
Looking for a Lightweight and Free Office Suite?
While Microsoft 365 offers comprehensive cloud security configurations for enterprises, managing local documents shouldn't require complex setups. WPS Office provides a lightweight, fast, and free alternative to Microsoft Office for your everyday document, spreadsheet, and presentation tasks.
- 1. Download the Installer: Visit the official WPS Office website and download the free version for your operating system.
- 2. Install and Launch: Run the installer, follow the on-screen prompts, and launch the application.
- 3. Open Your Office Files: Drag and drop your existing Microsoft Office documents directly into WPS Office to continue working seamlessly.

Frequently Asked Questions
Why are my Microsoft 365 activity alerts delayed?
Microsoft 365 activity alerts can experience delays due to backend system processing times. Microsoft documentation notes that it can occasionally take up to 24 hours for specific audit log events to process and generate an email alert.
Who can receive password change alerts in Microsoft 365?
Any user with a valid email address can be assigned as a recipient for activity alerts. However, for security events like administrator password changes, it is highly recommended to restrict notifications strictly to global administrators or designated security operations personnel.
Are customized activity alerts available in all Microsoft 365 plans?
Basic alert policies are available in most business plans, including Microsoft 365 Business Premium. However, highly advanced customized alert policies may require higher-tier security add-ons, such as Microsoft Defender for Office 365 Plan 2.
Can I set password alerts exclusively for specific admin accounts?
Yes, when configuring an alert policy in the Microsoft Purview compliance portal, you can define specific conditions so that the alert is only triggered when actions are performed by or on specific users, such as your designated emergency administrator accounts.




