Select Language

0D51Y000096PUgSSAWOkta Classic EngineAdministrationAnswered2026-08-24T17:23:27.000Z2020-08-04T17:01:03.000Z2020-08-06T20:29:29.000Z

GregH.00578 (Customer) asked a question.

AD Passworfd reset from a Mac

Scenario:

Users are AD mastered

User on Mac (non-domain joined) attempts to reset AD password via Okta

I see this in the logs: LegacyEventType app.ad.password.reset.failure

What am I missing?

rohern (Okta)
6 years ago
Hi Greg, a couple of quick things come to mind.
Confirm permissions are in place. If user is resetting a known existing password, no special permissions should be required. If they are resetting a forgotten pw (administratively) you would need elevated permissions on the AD Agent service account. https://help.okta.com/en/prod/Content/Topics/Directory/ad-agent-prerequisites.htm#ADuseraccount
Another common issue is the password reset policy in AD. I would check minimum password age: If they have recently reset their AD creds, the policy may be blocking them from doing it again. Password history could be an issue as well, if they are attempting to reuse a recently used password.

Expand Post
BhaskarM.18336 (Customer)
6 years ago
also check the AD agent server logs
Expand Post

This question is closed.