<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008C3jZnSAJOkta Classic EngineAdministrationAnswered2025-03-10T09:02:44.000Z2016-06-06T18:04:45.000Z2016-06-06T18:04:45.000Z
Can Okta continue to update Users AD passwords, if we enable the AD group Policy stating Users cannot update their own passwords?
We are worried about Mac Users updating their AD passwords by updating their Mac user accounts (Mac version of Cntrl-Alt-Del).  We were thinking if we set AD to not allow Users to change their passwords, this would address the issue.  But we need to ensure Okta will still be able to update the Users passwords.

  • j5v7c (j5v7c)

    Hello Nicholas,

     

    Unfortunately the Active Directory setting on the user account will take precedence over Okta's Delegated Authentication settings. The ability for users to change their AD password from Okta relies on the users AD permissions, so when a user authenticates with their AD credentials to Okta, their permissions from AD will be enforced.
    Expand Post
This question is closed.
Loading
Can Okta continue to update Users AD passwords, if we enable the AD group Policy stating Users cannot update their own passwords?