Update-MgUser Setting password forcechangepassword false bug report

[wongcc2012]

Describe the bug

When user signin, user forced to change password (your password is expired...)

Expected behavior

User sign in to O365 services without changing password.

How to reproduce

$UserPassProfile = @{
Password = $_.UserPass #Define password IN CSV file
ForceChangePasswordNextSignIn = $False #Change password True or False
}

Update-MgUser -UserId $_.UPN -PasswordProfile $UserPassProfile

(Setting a pre-defined password for a $UPN user, without enforced user change password when next sign in)

SDK Version

2.26.1

Latest version known to work for scenario above?

2.25.0

Known Workarounds

uninstall all graph.api powershell modules, install a older version

Debug output

Click to expand log

```

</details>


### Configuration

_No response_

### Other information

_No response_

[timayabi2020]

Hi @wongcc2012 please share the debug information by adding -Debug parameter at the end of the command

[wongcc2012]

debug logging:

PS C:\Users\Administrator\Desktop\MGUserPass-UAT> $UPN = "b-xxxxxx12a3@xxxxxxxsoft.com"

#REQUIRED VARIABLES FOR MG SET PASSWORD
#Define PWD profile
$UserPassProfile = @{
Password = '(MyPasswordEncrypted)' #Define password IN CSV file
ForceChangePasswordNextSignIn = $False #Change password True or False
}

Update-MgUser -UserId $UPN -PasswordProfile $UserPassProfile -debug

DEBUG: [CmdletBeginProcessing]: - Update-MgUser begin processing with parameterSet 'UpdateExpanded'.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A
DEBUG: [Authentication]: - AuthType: 'AppOnly', TokenCredentialType: 'ClientSecret', ContextScope: 'Process', AppName:
'Powershell Graph API 2023xxxx'.
DEBUG: [Authentication]: - Scopes: [User.ReadWrite.All, Domain.ReadWrite.All, DelegatedPermissionGrant.ReadWrite.All,
Application.ReadWrite.All, Directory.ReadWrite.All, User.EnableDisableAccount.All,
DeviceManagementServiceConfig.ReadWrite.All, Organization.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All,
User.ManageIdentities.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All].

Confirm
Are you sure you want to perform this action?
Performing the operation "Update-MgUser_UpdateExpanded" on target "Call remote 'PATCH /users/{user-id}' operation".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): A
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
PATCH

Absolute Uri:
https://graph.microsoft.com/v1.0/users/xxxxxx@xxxxxxsoft.com

Headers:
FeatureFlag : 00000003
Cache-Control : no-store, no-cache
User-Agent : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.26100;
en-US),PowerShell/5.1.26100.2161
SdkVersion : graph-powershell/2.26.1
client-request-id : d6d89551-c127-424f-a898-dce6d403a2b1

Body:
{
"passwordProfile": {
"password": "(MyPasswordEncrypted)"
}
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
NoContent

Headers:
Strict-Transport-Security : max-age=31536000
request-id : 4c246b39-c682-4cbf-bb01-af0bd9a217f8
client-request-id : d6d89551-c127-424f-a898-dce6d403a2b1
x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"Southeast
Asia","Slice":"E","Ring":"5","ScaleUnit":"002","RoleInstance":"SG1PEPF0000F080"}}
x-ms-resource-unit : 1
Cache-Control : no-cache
Date : Tue, 15 Apr 2025 09:01:13 GMT

Body:

DEBUG: [CmdletEndProcessing]: - Update-MgUser end processing.
PS C:\Users\Administrator\Desktop\MGUserPass-UAT>

[timayabi2020]

Thanks. Looks like its dropping the ForceChangePasswordNextSignIn property. This fix will be available by end of next week. Meanwhile you can try using Invoke-MgGraphRequest command.

[wongcc2012]

sorry I am not sure about how to use Invoke-MgGraphRequest with the HTTP REST API. I only work on powershell commands

[timayabi2020]

Please update to the latest version 2.27.0