Not sure if all вЂњRead/write all propertiesвЂќ are mandatory or could be more granular, but these are created as default, which does not apply to вЂњReset PasswordвЂќ permission unfortunately. Secondly, check if the Azure AD Connect MSOL account (MSOL_************) has вЂњReset PasswordвЂќ permission on the specific user AD object, or inherits it from domain security properties. Please review your on-premises policy to ensure that it is setup correctly'.ДЇirst, make sure new password meets GPO or local policies password requirements.ДЇirstly, pay attention to the вЂњMinimum password ageвЂќ attrubute.If it is not вЂњ0 daysвЂќ, it means that it is not possible to reset the password twice that same day. 'Unfortunately, you cannot reset this user's password because your on-premises policy does not allow it.

вЂњUnfortunately, you cannot reset this user's password due to a policy or error in your on-premises environmentвЂќ or

LetвЂ™s split the article into two sections вЂ“ password reset via Azure portal and self-service password reset (SSPR).Д¬ommon issues when resetting user password via Azure portal In this article we will assume we have a hybrid environment, which means Azure AD + domain controller (Azure hosted VM or on-prem). Administrator efforts to resolve these issues usually take way longer than expected. Internet articles and forums suggest various fixes for these, but often these solutions are confusing, not needed at all or not in depth enough. In this Blog we want to focus on a few specific user password reset issues, which we have continuously seen over time. There is a lot of information on the web regarding Azure AD password reset, setup and related issues.

Office 365 password reset request