Azure-docs: Difference is not clear

[bartvermeersch]

What's the difference between ForcePasswordChangeOnLogOn and ForcePasswordResetOnLogonFeature? Both are parameters on the command Set-ADSyncAADCompanyFeature.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: c900f942-4456-5238-9f4c-a7a5bd685c04
• Version Independent ID: a5d7d971-765f-0977-f531-232ea5924121
• Content: Implement password hash synchronization with Azure AD Connect sync
• Content Source: articles/active-directory/hybrid/how-to-connect-password-hash-synchronization.md
• Service: active-directory
• Sub-service: hybrid
• GitHub Login: @billmath
• Microsoft Alias: billmath

[FrankHu-MSFT]

@bartvermeersch Thanks for your feedback! We will investigate and update as appropriate.

[FrankHu-MSFT]

hey @bartvermeersch can you clarify on what's you're referring to in regards to : ForcePasswordChangeOnLogOn

This is not in the document.

[bartvermeersch]

hey Frank, I guess that's part of the problem, the ForcePasswordChangeOnLogOn attribute is nowhere to be found on docs.microsoft.com but it is present when running Get-ADSyncAADCompanyFeature and according to three blogs it is linked to ForcePasswordResetOnLogonFeature.
https://www.hametbenoit.info/2019/10/09/azure-ad-connect-you-can-now-synchronize-your-password-policy-and-force-the-password-change-at-next-logon-preview/
https://www.iphase.dk/new-password-policy-features-in-azure-ad-connect/
https://www.eshlomo.us/new-password-policies-on-azure-ad/

As a side note, I don't think the modification date on the top of the page is accurate because to my knowledge, ForcePasswordResetOnLogonFeature brand new?

[FrankHu-MSFT]

hey @bartvermeersch we're currently looking into this, but the three blogs you provided are all of people who do work at Microsoft, so I'm not sure if ForcePasswordChangeOnLogOn is meant to be used.

I'm currently going to look into this further to see if this parameter is going to be removed in the future or not, but so far it looks like it might just be a duplicate parameter.

[FrankHu-MSFT]

hey @bartvermeersch sorry for the very late reply, however after some further research it looks like the issue was related to some flagging inconsistencies, the flag should have been : ForcePasswordChangeOnLogOn

Not ForcePasswordResetOnLogonFeature we are updating the docs to remove the ForcePasswordResetOnLogonFeature accordingly. Thanks again for your feedback!

[FrankHu-MSFT]

As this issue is being addressed I'll be closing this out by end of day tomorrow please let us know if you have anymore issues in regards to this,