EnforceChangePasswordPolicy in New-AzureADUser and Set-AzureADUserPassword
This post explains what EnforceChangePasswordPolicy does when used as an attribute in a PasswordProfile parameter in New-AzureADUser, or Set-AzureADUserPassword:
Documentation
The New-AzureADUser documentation says EnforceChangePasswordPolicy is "a boolean indicating that the change password policy is enabled or disabled for this user".
The Set-AzureADUserPassword documentation says "If set to true, force the user to change their password".
Explanation
When I set EnforceChangePasswordPolicy to False for a particular Azure AD User, I can logon as that User with just a username and password.
If I set EnforceChangePasswordPolicy to True, that User is prompted for more information, even if they are already logged on:
Comments
Post a Comment