You have 200 computers that run Windows 10. The computers are joined to Azure AD and enrolled in Microsoft Intune. You need to enable self-service password reset on the sign-in screen. Which…

The correct answer is A. Device configuration. To enable the Self-Service Password Reset (SSPR) link on the Windows 10 sign-in screen for Azure AD-joined Intune-managed devices, you configure a Device Configuration profile in the Intune admin center. Specifically, you create a profile using the Identity Protection template…

Submitted by ngozi_ng· Apr 18, 2026Manage and maintain devices

Question

You have 200 computers that run Windows 10. The computers are joined to Azure AD and enrolled in Microsoft Intune. You need to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune admin center?

Options

ADevice configuration
BDevice compliance
CDevice enrollment
DConditional access

How the community answered

(48 responses)

A
77% (37)
B
8% (4)
C
13% (6)
D
2% (1)

Explanation

To enable the Self-Service Password Reset (SSPR) link on the Windows 10 sign-in screen for Azure AD-joined Intune-managed devices, you configure a Device Configuration profile in the Intune admin center. Specifically, you create a profile using the Identity Protection template (or a custom settings catalog entry for 'Authentication > Allow SSPR'), which pushes the EnableWebSignIn or related CSP policy to the device so users see a 'Reset password' option on the lock/sign-in screen. Device Compliance (B) only evaluates policy compliance. Device Enrollment (C) manages how devices are onboarded. Conditional Access (D) controls access policies based on conditions, but does not configure sign-in screen UI elements.

Topics

#SSPR#Device configuration#Azure AD#Windows 10

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice