Intune – Enable self-service password reset on Windows login screen new option

As you are now probably aware, Intune administrators were able to enable self-service password reset (SSPR) on the Windows login screen for quite some time

This enablement required to create a custom Intune device configuration profile, as documented here https://blog.hametbenoit.info/2017/11/06/azure-ad-allow-end-users-to-reset-password-or-pin-from-the-login-screen/.

Well, as Intune has been evolving quite quickly and some time you may miss updates, there is now an easier way to enable the SSPR on Windows login screen.

Indeed, there is no more need to create a custom device profile in Intune, instead you can use the Settings Catalog profile type and then turn On the Allow Aad Password Reset setting, available under the Authentication option

image

If you had already configured it using the custom profile, you can update your configuration to use a Settings catalog profile instead.

Leave a Comment

Your email address will not be published. Required fields are marked *