By default when using the "Change Password" tool under the "Admin" toolbar, you are not permitted to change the password of a user belonging to an Active Directory group that contains that word "admin", "staff" and "personnel". You have the ability to edit the default filter names:

- Open "regedit"

- Navigate to:

32 bit - "HKEY_LOCAL_MACHINE\Software\Impero Solutions Ltd\ImperoV3"

64 bit - "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Impero Solutions Ltd\ImperoV3"

- You may need to reset someone's password if you do not see the key. A new key is created called "FailPasswordResetIfInADGroup" which is a string field after the first password reset from within the Impero Console.

- In this key you have a comma-separated list of AD groups that are immune from the password reset function.

- This is wildcard based, using the asterisk * key.

- You can edit this key to add/remove/edit the group names that are exempt from password changes.