Reset-O365UserPassword

Azure AD: Resets a user's password

Script

#Requires -Version 5.1
#Requires -Modules AzureAD

[CmdletBinding(DefaultParameterSetName = "UserName")]
Param(
    [Parameter(Mandatory = $true, ParameterSetName = "UserObjectId")]
    [guid]$UserObjectId,

    [Parameter(Mandatory = $true, ParameterSetName = "UserName")]
    [string]$UserName,

    [Parameter(ParameterSetName = "UserName")]
    [Parameter(ParameterSetName = "UserObjectId")]
    [securestring]$NewPassword,

    [Parameter(ParameterSetName = "UserName")]
    [Parameter(ParameterSetName = "UserObjectId")]
    [bool]$ForceChangePasswordNextLogin
)

Process {
    try {
        if ($PSCmdlet.ParameterSetName -eq "UserObjectId") {
            $usr = Get-AzureADUser -ObjectId $UserObjectId -ErrorAction Stop | Select-Object *
        }
        else {
            $usr = Get-AzureADUser -All $true -ErrorAction Stop | Where-Object { ($_.DisplayName -eq $UserName) -or ($_.UserPrincipalName -eq $UserName) } | Select-Object *
        }

        if ($null -eq $usr) { throw "User not found" }

        if ($PSBoundParameters.ContainsKey('ForceChangePasswordNextLogin')) {
            $null = Set-AzureADUserPassword -ObjectId $usr.ObjectID -Password $NewPassword -ForceChangePasswordNextLogin $ForceChangePasswordNextLogin -ErrorAction Stop
        }
        else {
            $null = Set-AzureADUserPassword -ObjectId $usr.ObjectID -Password $NewPassword -ErrorAction Stop
        }

        [PSCustomObject]@{
            Timestamp   = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
            Status      = "Success"
            DisplayName = $usr.DisplayName
            ObjectId    = $usr.ObjectID
            Message     = "Password reset for user '$($usr.DisplayName)'"
        }
    }
    catch { throw }
}

Customize

UserObjectId guid

Unique object ID of the user

UserName string

Display name or UPN of the user

NewPassword securestring

New password for the user (secure string)

ForceChangePasswordNextLogin bool

Forces the user to change password on next sign-in