Preventing Windows users from changing their passwords in Entra-integrated devicesSolved

Participant
Discussion
4 days ago

Hey everyone!

Quick question! Is there any way to remove or disable the Change a password option that appears when users press Ctrl + Alt + Delete on Windows?

Our setup uses Entra ID with Hexnode Access, which keeps the local account password synced with Entra. The issue is that when users change their password directly on Windows, it breaks the sync, so we’d like to prevent them from doing that.

Any idea how to block it?

Replies (4)

Marked SolutionPending Review
Hexnode Expert
4 days ago
Marked SolutionPending Review

Hey there! You can disable the Change a password option using a simple registry command. Here’s what you can add:

You can push this command to your devices through Hexnode’s Execute Custom Script policy. Once it runs, the Change a password option will no longer appear for that user.

Best Regards,
Isabel Lora
Hexnode UEM

Marked SolutionPending Review
Participant
3 days ago
Marked SolutionPending Review

Thanks for the quick help,  @isabel_lora ! But we were hoping to avoid custom scripts. Is there any policy or built-in option in Hexnode to handle this instead? 

Marked SolutionPending Review
Participant
2 days ago
Marked SolutionPending Review

Hi @clauss , I don’t think there’s a direct Hexnode policy for this yet. Even Microsoft doesn’t offer a built-in option to block password changes, apart from scripts or group policy tweaks.

Marked SolutionPending Review
Hexnode Expert
2 days ago
Marked SolutionPending Review

That’s correct @luuk . At the moment, Microsoft doesn’t provide a native feature to disable the Change a password option. So, the registry command via custom script remains the only reliable way to implement this restriction.

Hopefully, we’ll see more direct options in the future — but for now, this workaround does the job!

Best Regards,
Isabel Lora
hexnopde UEM

Save