
Wireless-only/mostly Macs and FileVault encryption add to the complexity. Users are required to prove their identity through any of the enforced authentication methods, like SMS-based one-time passwords (OTPs), email-based OTPs, Google Authenticator, DUO Security, and RSA SecurID.Password changes for AD users on MacOS (AD-bound Macs) are anything but trouble-free, in my experience. User identity verification: Clicking this link will open the password reset portal.ADSelfService Plus places a Reset Password/Account Unlock link (also called the logon agent) on the Mac login screen.
/resetpasswordhint-579bc7563df78c3276694786.jpg)
Self-service password reset for macOS: How does it work?

Furthermore resetting their passwords, ADSelfService Plus also lets users update their cached credentials. Their private networks, even remotely.Their mobile devices by accessing the ADSelfService Plus iOS or Android mobile app or mobile site.Web browsers by accessing the ADSelfService Plus portal, which can be configured to be accessed through all major web browsers.

