A.18 Does SSPR honor the Active Directory password history policy?

Forgotten Password recovery or reset is generally performed by using a proxy or administrator’s account in SSPR. However, you can configure to use the user's account while setting the forgotten password by disabling Use Proxy When Password Forgotten under Settings> Active Directory. In this scenario, the Active Directory policy is d while changing the password.

However, this does result in a temporary password being set on the user's account just before they set a new password. This can cause issues if there is a minimum lifetime set for the password policy.