SSO behaviour and password resets

[jamesturps]

Hi

We have Endpoint protection and single sign-on works well - AD password at boot screen > straight into Windows desktop.

We are piloting this and want to understand the behaviour better regards to password resets. Obviously not expecting EndPoint to reset the password in AD from boot screen but if the user recovers specifying a new password (still with SSO enabled), once they have logged into windows will their AD password overwrite the recently reset EndPoint password?

Just a thought - is it possible to just allow the user to answer Q&A questions which would take them to the Windows login, rather than actually setting a password which will be one-time and irrelavant if overwritten by AD?

thanks