Allow Non-Admin Self Service Recovery to Reset Own Password in Google Apps

For administrator who manage Google Apps services which have hundreds or thousands of accounts for their organization, allowing non-admin end-users to reset their own passwords seem to be a good way to cut down unnecessary administrative workload and save the time of frustrated people in the domain who is locked out from their accounts.

Google Apps do allow administrator to turn on and enable the ability for non-admins to reset their own passwords. By default, the option is disable (off). Here’s how to enable the option to allow non-admin self service password recovery in Google Apps:

1. Login to Google Apps Admin console via https://admin.google.com/ by using Google Apps administrator email address.
2. At the Admin console dashboard, go to Security. You may need to expand MORE CONTROLS if it’s not in sight.
3. Go to Basic settings and go to Password Management section.
4. Under the Password recovery heading, click on Enable/disable non-admin user password recovery link to access the Advanced security settings.

   
5. In the Recovery section, under the Password recovery heading, select and check the Enable non-admin user password recovery box.

The Google Apps users in the domain have to set up a recovery phone number in order to use self service user password recovery, where they can use either a voice message or a text message to receive their recovery code to reset the user password.

Non-admin user password recovery feature is not available for customers using Single Sign-on (SSO) and Google Apps Password Sync for Active Directory (GAPS). In addition, it’s available only for Google Apps for Work (e.g. paid services). So if you’re using Google Apps Free Edition or Google Apps for Education K-12 (they’re not allowed to enter phone number), you’re out of luck.