Hi All, I recently noticed that this option is greyed out. Is it possible to make it back optional or it is mandatory now?

Hello, @ X-Box-11-2021 , Welcome to the Microsoft Q&A platform! Based on your description, I understand that you want to know if “User is required to change their password when they first sign in” on the Reset Password screen is optional or mandatory. After testing, “User is required to change their password when they first sign in” is grayed out and cannot be unchecked on M365, whether you create a new user or reset a user's password. This is definitely an update made by Microsoft to keep its users safe. If you want the user to keep the initially set password, you just need to use PowerShell according to my testing process. I reset a user’s password in M365 and when logging into the account for the first time I am asked to change the password. I used the following command in PowerShell to disable forced password changes. When I tried to log into the account again for the first time, it logged in successfully straight away and didn't ask me to reset my password. If the answer is helpful, please click " Accept Answer " and kindly upvote it. If you have extra questions about this answer, please click " Comment ". Thank you for your support and understanding. Best Wishes, Alex Zhang

Well Microsoft this new policy is Garbage. we have tenants that are for Dynamics only, and are isolated from ADsync or anything on-prem. As such we do NOT have PowerShell access. Now we cannot onboard new users properly because MFA can't be set up until AFTER we set the user account, but we can't set the account without being able to log in with the MFA. Maybe time to drop D365

This is an SI from Microsoft MO897396 and it is being worked on

"User is required to change their password when they first sign in" - possible to disable?

X-Box-11-2021 225

Hi All,

I recently noticed that this option is greyed out.

User's image

Is it possible to make it back optional or it is mandatory now?

3 answers

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-09-23T09:44:11.63+00:00
Hello, @X-Box-11-2021,

Welcome to the Microsoft Q&A platform!

Based on your description, I understand that you want to know if “User is required to change their password when they first sign in” on the Reset Password screen is optional or mandatory.

After testing, “User is required to change their password when they first sign in” is grayed out and cannot be unchecked on M365, whether you create a new user or reset a user's password. This is definitely an update made by Microsoft to keep its users safe.

If you want the user to keep the initially set password, you just need to use PowerShell according to my testing process.

I reset a user’s password in M365 and when logging into the account for the first time I am asked to change the password.

I used the following command in PowerShell to disable forced password changes.

When I tried to log into the account again for the first time, it logged in successfully straight away and didn't ask me to reset my password.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thank you for your support and understanding.

Best Wishes,

Alex Zhang
Please sign in to rate this answer.

1 person found this answer helpful.
Robert Mark 0 Reputation points

2024-09-23T18:39:38.81+00:00

Can't see what the PS script is.

Also, Microsoft, this does NOT work when we use a tenant that is ONLY for Dynamics and does not have an ADSync that we can use for Powershell connectivity.

Stupid policy when we cannot onboard new users anymore

Robert Mark 0 Reputation points

2024-09-23T18:40:30.89+00:00

Unable to read the PowerShell script. The screen capture is too small

X-Box-11-2021 225 Reputation points

2024-09-24T06:52:30.77+00:00

Thanks @Alex Zhang-MSFT

So, it seems force password reset can be disabled per user but not permanently for the entire organization?

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-09-25T07:33:33.1433333+00:00

Hello, @X-Box-11-2021,

Thanks for your prompt reply.

Based on your question, I understand that you want to know if forced password reset can be permanently disabled for the entire organization.

To disable forcing all users to change their passwords, you can use the following command.

Get-MsolUser -All | Set-MsolUserPassword -ForceChangePasswordOnly $false -ForceChangePassword $false

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thank you for your support and understanding.

Best Wishes,

Alex Zhang

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-09-27T09:31:34.9433333+00:00

Hello, @X-Box-11-2021,

Is there any update on this thread? If the issue has been resolved, please mark the helpful replies as answers, this will make answer searching in the forum easier and be beneficial to other community members as well. Thanks for your understanding.

Best Wishes,

Alex Zhang

X-Box-11-2021 225 Reputation points

2024-09-28T22:41:28.44+00:00

Hi @Alex Zhang-MSFT

Thanks for following up.

I have no further questions.

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-09-30T01:07:09.38+00:00

Hello, @X-Box-11-2021,

Thanks for your kind reply.

If the answer is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Best Wishes,

Alex Zhang

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-10-04T00:29:45.0966667+00:00

Hello, @X-Box-11-2021,

Just wanted to check if the answer shared below helped. If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-10-07T05:01:41.9866667+00:00

Hello, @X-Box-11-2021,

If the answer is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Best Wishes,

Alex Zhang
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Robert Mark 0 Reputation points

2024-09-23T18:42:44.2+00:00

Well Microsoft this new policy is Garbage.

we have tenants that are for Dynamics only, and are isolated from ADsync or anything on-prem. As such we do NOT have PowerShell access.

Now we cannot onboard new users properly because MFA can't be set up until AFTER we set the user account, but we can't set the account without being able to log in with the MFA.

Maybe time to drop D365
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Oluwaseye Adeshina 0 Reputation points

2024-09-24T21:49:01.4+00:00

This is an SI from Microsoft MO897396 and it is being worked on
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

"User is required to change their password when they first sign in" - possible to disable?

3 answers

Your answer