Users must register for SSPR before using this feature at.An administrator must enable Azure AD self-service password reset from the Azure portal.To configure a Windows 11 or 10 device for SSPR at the sign-in screen, review the following prerequisites and configuration steps. These limitations also apply to Windows Hello for Business PIN reset from the device lock screen. DisableLockScreenAppNotifications = 1 or Enabled.Interactive logon: Do not require CTRL+ALT+DEL = Disabled (only for Windows 10 version 1710 and earlier).The combination of the following specific three settings can cause this feature to not work.Interactive logon: Require smart card is set to enabled or 1.Explorer.exe is replaced with a custom shell.BlockNonAdminUserInstall is set to enabled or 1.DontDisplayLastUserName is set to enabled or 1.HideFastUserSwitching is set to enabled or 1.If lock screen notifications are turned off, Reset password won't work.

The following settings are known to interfere with the ability to use and reset passwords on Windows 10 devices:.More information about this step can be found in the support article Performance poor when using custom default user profile.

If using an image, prior to running sysprep ensure that the web cache is cleared for the built-in Administrator prior to performing the CopyProfile step.

This means that devices must either be on the organization's internal network or on a VPN with network access to an on-premises domain controller.

Hybrid Azure AD joined machines must have network connectivity line of sight to a domain controller to use the new password and update cached credentials.

For networks with 802.1x network authentication deployed, it's recommended to use machine authentication to enable this feature. This feature doesn't work for networks with 802.1x network authentication deployed and the option 'Perform immediately before user logon'.Disabling UAC via modification of EnableLUA registry key is known to cause issues.Some third party credential providers are known to cause problems with this feature.Password reset isn't currently supported from a Remote Desktop or from Hyper-V enhanced sessions.The following limitations apply to using SSPR from the Windows sign-in screen: If your IT team hasn't enabled the ability to use SSPR from your Windows device or you have problems during sign-in, reach out to your helpdesk for additional assistance.

This tutorial shows an administrator how to enable SSPR for Windows devices in an enterprise.

Windows 7 password reset software