Allowing teachers to reset a students password from office 365

[m0bov]

Hi all. We want to allow certain teachers to change student passwords using the admin center. I have used co pilot to help me set this up.

 

I have created an AU, popped a test student in there, then added a test teacher account to the Password role for that AU.

 

When the test teacher logs in, they can see the student account, they can change the password. But it only changes it for Azure. We already use SSRP, so the write back is turned on. I have tested it again my own account, going into the azure user page for that account and changing the password, it does write back.

 

But for some reason, when you do an "admin" change of a password, like from Azure console, it does'nt. The passwords go out of sync.

 

Any ideas? I don't want the students to have to register for SSRP, likewise I don't want to have to put AD tools and MMC console onto teachers machines to change the password on AD!

 

Its just a simple process I want for a few teachers to be able to hit the admin webpage and change student passwords.

 

Co Pilot says SSRP is a differant route, hence its working, but what I am doing is a sort of admin password reset. It suggests the below, is this correct?

 

On the Students OU:

1. Open Active Directory Users and Computers

2. Right-click OU → Delegate Control

3. Add: 👉 Azure AD Connect service account

4. Grant:

   • ✅ Reset user passwords
   • ✅ Force password change
   • ✅ Write lockoutTime

 

Thanks.

Edited May 26 by m0bov