Microsoft Security | Microsoft Graph
An API that connects multiple Microsoft services, enabling data access and automation across platforms
Password reset via Graph API succeeds but does not sync to hybrid AD devices
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 33%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Sangamesh Bagalkot
0
Reputation points
Hello,
We are performing password resets using Microsoft Graph API in a hybrid AD environment (Azure AD + on-premises AD).
API Details:
PATCH https://graph.microsoft.com/v1.0/users/{userPrincipalName}
Request body:
{
"passwordProfile": {
"forceChangePasswordNextSignIn": true,
"password": "
Microsoft Security | Microsoft Graph
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC3%3C/text%3E%3C/svg%3E)
Carolyne-3676 881 Reputation points2025-11-11T08:27:46.49+00:00 Hello Sangamesh!
Thanks for reaching out. Does this happen despite enabling Password Writeback?
In Entra Connect, go to Optional Features → enable Password writeback. Check Password Policies. EnsurepasswordPoliciesis not set toDisablePasswordSyncorNone. -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 78%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
Peter Stapf 0 Reputation points2025-12-09T15:34:02.98+00:00 We are facing the same issue as a customer. Also DisablePasswordSync seems not to be a valid value. I also cant find any documentation about that value.
Sign in to comment
Sign in to answer