What happens if you select "User must change password on first login" when setting a password for a new user?

What happens if you select "User must change password on first login" when setting a password for a new user?

• A. The admin sets the user's password
• B. The user immediately receives a password
• C. The user will be locked out
• D. The user is prompted to change their password on first sign-in

Answer: (D)

Selecting "User must change password on first login" means that the new user is required to create a new password when they first attempt to log in. This feature is important for security, as it ensures that the user has control over their password from the very beginning, making it unique to them rather than one that has been set by the administrator. When the user logs in for the first time, they will see a prompt to change their password before they can proceed to access their account. This process not only helps secure the account by preventing unauthorized access with a potentially shared or default password but also aligns with best practices in identity and access management by encouraging users to adopt a password known only to them. The other options do not align with this action. The administrator does indeed set an initial password, but the expectation is that the user will change it. The user does not automatically receive a password that they can use indefinitely without changing it first, nor do they get locked out simply for the requirement of changing their password; they are instead guided to complete this process seamlessly upon initial access.

Selecting "User must change password on first login" means that the new user is required to create a new password when they first attempt to log in. This feature is important for security, as it ensures that the user has control over their password from the very beginning, making it unique to them rather than one that has been set by the administrator.

When the user logs in for the first time, they will see a prompt to change their password before they can proceed to access their account. This process not only helps secure the account by preventing unauthorized access with a potentially shared or default password but also aligns with best practices in identity and access management by encouraging users to adopt a password known only to them.

The other options do not align with this action. The administrator does indeed set an initial password, but the expectation is that the user will change it. The user does not automatically receive a password that they can use indefinitely without changing it first, nor do they get locked out simply for the requirement of changing their password; they are instead guided to complete this process seamlessly upon initial access.