You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users. You need to implement self-service password reset. You want to achieve…

Azure AD Premium P2 includes SSPR functionality but is more expensive than P1, which already provides all the necessary SSPR features including password writeback, making P2 unnecessary and not cost-minimizing.

Azure AD Connect is required to synchronize on-premises Active Directory users to Azure AD and, critically, to enable password writeback - the feature that allows SSPR changes made in Azure AD to be written back to the on-premises AD environment.

Azure Information Protection is a data classification and protection service used for labeling and securing documents and emails; it has no role in enabling or supporting self-service password reset functionality.

Azure AD Premium P1 is the minimum license tier that includes SSPR with on-premises password writeback capability, and since the company already has E1 licenses, upgrading to P1 (rather than P2) minimizes costs while meeting the requirement.