We're moving to Office 365. Users who are using the cloud for email, etc, apparently have the ability to request a password reset. This is not how we handle this kind of request and I'd like to be able to turn that off... is it possible?
Currently we're running in a Hybrid environment with AD on -premise.
i did not test it, but there is a solution on this link (mid page):
https://blogs.technet.microsoft.com/ilvancri/2012/06/22/take-away-the-possibility-for-users-in-exchange-online-to-change-their-own-password/
Regards,
Ivan.