This should clarify it:

Resetting a Password vs. Changing a Password:

A password change is a user action, where a user enters a new password for his or her Windows user account. Windows authenticates the user before he or she is allowed to change the password. This means that a user must always first enter his or her old password before being allowed to change it. A user must also have the Change Password permission on his or her AD domain account object to be allowed to change the password. A user can change his or her password from the User Accounts Control Panel applet or from the Change Password option in the Logon dialog box that pops up after pressing Ctrl+Alt+Del.

A password reset is an administrative action, where a Windows administrator (or a Windows account that has the Reset Password permission on a user’s account object) resets a user’s password. As opposed to a password change, a password reset doesn’t require knowledge of the old password. Any account that has the Reset Password permission on a user’s AD domain account object can do a password reset. Password resets can be launched from one of the AD account management tools such as the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in or the Active Directory Administrative Center.

Reference:
http://windowsitpro.com/security/resetting-password-vs-changing-password

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s