--- title: Identity Protection Reset Password Action description: This guide will show an administrator how to reset the password for a user if the risk associated with the account has been determined to be true. --- [Skip to content](https://knowledge.sittadel.com/identity-protection-reset-password-action#main-content) [![Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent copy](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png?width=55&height=55&name=Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png)](https://sittadel.com/) - [About Sittadel](https://sittadel.com/about/) - [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/) Show submenu for Capabilities - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/) - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/) - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/) - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/) - [Resources](https://sittadel.com/resources/) - [Knowledge Base](https://knowledge.sittadel.com/) Open main navigation Close main navigation - [About Sittadel](https://sittadel.com/about/) - [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/) Show submenu for Capabilities - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/) - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/) - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/) - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/) - [Resources](https://sittadel.com/resources/) - [Knowledge Base](https://knowledge.sittadel.com/) - [Get Sittadel](https://sittadel.com/start/) [Get Sittadel](https://sittadel.com/start/) Find answers to your security questions. - There are no suggestions because the search field is empty. 1. [Sittadel Knowledge Base](https://knowledge.sittadel.com/?hsLang=en) 2. [Azure Portals](https://knowledge.sittadel.com/azure-portals?hsLang=en) 3. [Entra ID](https://knowledge.sittadel.com/azure-portals?hsLang=en#entra-id) # Identity Protection Reset Password Action ## This guide will show an administrator how to reset the password for a user if the risk associated with the account has been determined to be true. ### **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Jan-19-2024-04-04-16-2156-PM.png?width=125&height=133&name=image-png-Jan-19-2024-04-04-16-2156-PM.png)Role Requirements** Procedure Scope: **Administrators** Required Group Membership: **Admin.SecurityOperator** ### **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Jan-19-2024-04-13-05-5511-PM.png?width=125&height=148&name=image-png-Jan-19-2024-04-13-05-5511-PM.png)** ### **Handbook Reference** Package: **Identity Security** Domain: **Risky Users Queue** Modifies: **N/A** **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Jan-19-2024-04-29-09-3760-PM.png?width=670&height=5&name=image-png-Jan-19-2024-04-29-09-3760-PM.png)** Initiating the **Password reset** action should be carried out once a **Risky User** has been **Blocked** from being able to successfully authenticate during sign-in prompts or MFA prompts. **Risky Users Password Reset Action** 1. Navigate to the [Risky Users – Azure Active Directory](https://portal.azure.com/#view/Microsoft_AAD_IAM/SecurityMenuBlade/~/RiskyUsers) portal, locate and select a desired risky user from the list. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-16-08-2840-PM.png?width=670&height=360&name=image-png-Dec-13-2024-06-16-08-2840-PM.png) 2. From the **Risky User Details** flyout, select the **Reset password **action. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-20-11-8696-PM.png?width=670&height=358&name=image-png-Dec-13-2024-06-20-11-8696-PM.png) 3. A new flyout will be displayed detailing that a **Temporary Password** will be assigned to the user and upon the user's next sign-in attempt they will be forced to change their password. Select **Reset Password** to display the **Temporary Password for the User.** ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-20-20-5093-PM.png?width=670&height=360&name=image-png-Dec-13-2024-06-20-20-5093-PM.png) 4. Make sure to capture the **Temporary Password** that is displayed, this will need to be provided to the user when they are prompted for a password reset upon their next authentication attempt. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-23-04-6301-PM.png?width=363&height=320&name=image-png-Dec-13-2024-06-23-04-6301-PM.png) 5. Once the **Reset Password** action has been successfully carried out, it is best practice to also initiate the **Revoke Sessions** action to ensure that all active sessions that are utilizing the previously reset password are also terminated. This can be done by navigating to the [Users – Azure Active Directory](https://portal.azure.com/#view/Microsoft_AAD_UsersAndTenants/UserManagementMenuBlade/~/AllUsers) portal, locate and select the account that has recently has its password reset. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-25-38-4059-PM.png?width=670&height=360&name=image-png-Dec-13-2024-06-25-38-4059-PM.png) 6. On the **Overview** pagefor the selected **User Account**, locate and select the **Revoke Sessions** action, a disclaimer will be displayed detailing that all active sessions will be terminated, and the user will be forced to re-authenticate on all devices. Select **Yes** to successfully revoke all active sessions for the selected account. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-29-13-3449-PM.png?width=670&height=359&name=image-png-Dec-13-2024-06-29-13-3449-PM.png) 7. Carrying out the listed actions above should result in the selected user having their previously stored **Password** being successfully removed and having all their active sessions utilizing this revoked **Password** also being terminated. Upon their next authentication attempt, make sure to supply the **User** with the previously captured **Temporary Password** since the system has already modified their previously stored password to reflect the generated **Temporary Password**. They will be prompted with a new password prompt requiring a new password be configured once the authentication attempt has been verified and will be re-required to upload the **Temporary Password** one last time before the creation of a new password. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Dec-13-2024-06-29-05-5433-PM.png?width=386&height=375&name=image-png-Dec-13-2024-06-29-05-5433-PM.png) ### Need Assistance? Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? [Inquire](https://sittadel.com/start/) about arranging a consultation to explore optimizing your Azure environment for painless management. - [UserOps](https://knowledge.sittadel.com/userops?hsLang=en#main-content) - [Access & Permissions](https://knowledge.sittadel.com/userops?hsLang=en#access-permissions) - [Account](https://knowledge.sittadel.com/userops?hsLang=en#account) - [Devices](https://knowledge.sittadel.com/userops?hsLang=en#devices) - [Document Sharing](https://knowledge.sittadel.com/userops?hsLang=en#document-sharing) - [Email](https://knowledge.sittadel.com/userops?hsLang=en#email) - [Requests](https://knowledge.sittadel.com/userops?hsLang=en#requests) - [Troubleshoot](https://knowledge.sittadel.com/userops?hsLang=en#troubleshoot) - [TechOps](https://knowledge.sittadel.com/techops?hsLang=en#main-content) - [Tenant Foundations](https://knowledge.sittadel.com/techops?hsLang=en#tenant-foundations) - [Collaboration Security](https://knowledge.sittadel.com/techops?hsLang=en#collaboration-security) - [Email Security](https://knowledge.sittadel.com/techops?hsLang=en#email-security) - [Device Security](https://knowledge.sittadel.com/techops?hsLang=en#device-security) - [Identity Security](https://knowledge.sittadel.com/techops?hsLang=en#identity-security) - [SecOps](https://knowledge.sittadel.com/secops?hsLang=en#main-content) - [Email SOC](https://knowledge.sittadel.com/secops?hsLang=en#email-soc) - [Identity SOC](https://knowledge.sittadel.com/secops?hsLang=en#identity-soc) - [Tenant SOC](https://knowledge.sittadel.com/secops?hsLang=en#tenant-soc) - [Device SOC](https://knowledge.sittadel.com/secops?hsLang=en#device-soc) - [Deploy Intune](https://knowledge.sittadel.com/deploy-intune?hsLang=en) - [Deploy MDE](https://knowledge.sittadel.com/deploy-mde?hsLang=en#main-content) - [Overview](https://knowledge.sittadel.com/deploy-mde?hsLang=en#overview) - [Intune Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#intune-deployment) - [Hands-On Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#hands-on-deployment) - [Azure Arc Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#azure-arc-deployment) - [RMM Tool Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#rmm-tool-deployment) - [MECM/SCCM Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#mecm-sccm-deployment) - [GPO Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#gpo-deployment) - [Deploy Services](https://knowledge.sittadel.com/deploy-services?hsLang=en#main-content) - [Cloud Enclave](https://knowledge.sittadel.com/deploy-services?hsLang=en#cloud-enclave) - [Azure Portals](https://knowledge.sittadel.com/azure-portals?hsLang=en#main-content) - [Entra ID](https://knowledge.sittadel.com/azure-portals?hsLang=en#entra-id) - [Intune](https://knowledge.sittadel.com/azure-portals?hsLang=en#intune) - [Defender](https://knowledge.sittadel.com/azure-portals?hsLang=en#defender) - [Purview](https://knowledge.sittadel.com/azure-portals?hsLang=en#purview) - [SharePoint Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#sharepoint-admin-center) - [Teams Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#teams-admin-center) - [Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#admin-center) - [Exchange Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#exchange-admin-center) [![](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel_LogoH_Color_BlackText.png?width=186&height=55&name=Sittadel_LogoH_Color_BlackText.png)](https://Sittadel.com) Security for Humans. Copyright © 2026, Sittadel