Administrator-Initiated Manual Password Changes

Overview

This guide describes how administrators can manually change or generate a new password for a domain user in Hideez Enterprise Server.

Manual password management is required when automatic password updates are not configured, or when immediate, one-time intervention is needed.

Prerequisites

Before manually changing a user's password, ensure the following conditions are met:

1. You are logged in as a user with administrator rights in Hideez Enterprise Server.

2. Integration with Active Directory is properly configured in Hideez Enterprise Server.

3. The user must have a Hideez Key with one of the following statuses: "Ready", "Active", or "Reserved".

4. The workstation is joined to the Active Directory domain.

5. The Hideez Client is installed on the user’s workstation.

6. The workstation is approved in the Hideez Enterprise Server (see the Workstations section).

Use Case: Resetting a Forgotten Password for a Domain User

An employee contacts IT support after being locked out of their domain account due to a forgotten password. The administrator needs to manually reset the password in Hideez Enterprise Server to restore access.

Flow:

• The administrator opens the Employees section, finds the user, and clicks Edit Password.

• A temporary password is manually set or a new strong random password is generated.

• The new password is updated in the user's Active Directory account.

• When the Hideez Key is connected to the workstation, the new password is securely written to the key.

• The user logs in using the Hideez Key and can change their domain password through the Hideez Client interface.

Important: After changing the password manually, neither the user nor the administrator will be able to view or retrieve the new password.

Steps for Manual Password Change

Step 1: Open the user profile

• Navigate to the Employees section in Hideez Enterprise Server.

• Select the target user and click Edit Password.

Step 2: Edit the account password

Click Edit password, type the new password, confirm it, and then click Save.

Additional Notes

• The new password must not match any previously used passwords for the account.

• Your domain's password policy must allow password changes at the time of the operation (e.g., minimum password age policies may block immediate changes).

• In hybrid infrastructures, the password is updated both in on-premises Active Directory and Azure Active Directory (if synchronization is configured).

• Refer to Microsoft’s documentation on Active Directory password policies for more information.