MS-900 · Question #166
A company uses Microsoft 365. Users who are based on-premises must be able to reset their own passwords. The company plans to purchase Azure Active Directory (AD) licenses. You need to identify the…
The correct answer is A. Azure AD Premium P2 D. Azure AD Premium P1. Self-Service Password Reset (SSPR) for on-premises users requires password writeback, which is only available in Azure AD Premium P1 and P2 licenses.
Question
Options
- AAzure AD Premium P2
- BAzure AD Free
- COffice 365 apps
- DAzure AD Premium P1
How the community answered
(46 responses)- A96% (44)
- B2% (1)
- C2% (1)
Why each option
Self-Service Password Reset (SSPR) for on-premises users requires password writeback, which is only available in Azure AD Premium P1 and P2 licenses.
Azure AD Premium P2 includes all P1 features plus advanced identity protection, and it fully supports SSPR with password writeback to on-premises Active Directory, satisfying the requirement for on-premises users to reset their own passwords.
Azure AD Free supports SSPR only for cloud-only accounts and does not include the password writeback feature required to reset passwords for on-premises Active Directory users.
Office 365 apps license includes a limited version of SSPR but does not support password writeback to on-premises Active Directory, making it insufficient for users whose identities are managed on-premises.
Azure AD Premium P1 includes Self-Service Password Reset with password writeback capability, which synchronizes password changes back to the on-premises Active Directory environment, making it the minimum license tier that meets this specific requirement.
Concept tested: Azure AD SSPR licensing with on-premises password writeback
Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing
Topics
Community Discussion
No community discussion yet for this question.