Do you know how Active Directory works? If not, you should. It’s one of the most important parts of your Windows infrastructure and it’s essential for managing user access, files, and servers. In this article, we’ll explain what is the difference of Reset and Change password permission.
Active Directory default permissions, let’s you change your own password, but only Administrators and Account Operators can reset passwords. An administrator or support person handles a user’s forgotten password, uses the Reset password permission, which does not need to know the account’s current password. The Change password permission on the other hand requires that the user who changes the password know the account’s current password.