- [Instructor] For the exam, you'll need to know
how to configure self service password reset,
and this is done in the Azure Active Directory
tenant of the portal, and you'll need to
go ahead and select password reset
from under manage.
Our first configuration option is to enable password reset,
you could also disable password reset,
or use selected.
Microsoft recommends using the groups option
for proof of concept or testing,
and then deploy to the entire tenant
and that would be selecting all.
Next we have the authentication methods.
Starting with the number of methods required
to reset the password you have two choices,
one or two methods.
This is followed by the methods
that are available to the users.
Now there are four options, and at least one
must be selected.
I have two selected, so my user would be able
to pick and choose which method they want to use.
If you select security questions,
there are additional options, the first being
the number of questions required to register,
and you can choose between three and five.
Next we have the number of questions required to reset,
and again you can choose between three and five questions.
Now your users will need to answer all
of those questions correctly in order to reset or register.
Now we can go ahead and select the security questions,
and you'll notice that we have a list
of predefined questions, and you could go ahead
and select as many as you need here.
We also have the option to configure custom questions.
In here you would go ahead and type in
your security question.
I'm not going to do so, I'm gonna go ahead and select OK,
and you'll notice at the bottom,
I have a little exclamation mark letting me know
that I need to select at least five.
I'm just gonna go ahead and select three,
and then click save.
Next we have registration, this is optional.
If you select this, the users must register
when they sign in, followed by the number of days
that the users will have to reconfirm
their authentication information.
In our case we can see it's 180 days.
Notifications are also optional.
Notifications provide administrators
with the option to be notified
when a user resets their password,
or when an administrator resets their own password.
It's under customization that we can provide
a help desk link that would be available to the user,
and finally, if you're using Azure Active Directory Connect
to synchronize with your on premise identities
with Azure Active Directory, you can
enable password write back.
You can also allow users to unlock
their account without resetting their password.
One thing to note here, if you want your
on premise users to reset their passwords immediately,
then set the minimum password age to zero days.
Now you'll notice immediately that there is
a big red exclamation mark on this page,
and that is because my Azure Active Directory
cannot connect to my on premise directory,
therefore password write back cannot be performed
in this scenario.