Hosted Exchange Reset Password
Note: This help article applies only to Hosted Exchange. If you are not sure which email service you use, you can find more information in the following article.
https://www.green.ch/en/which-email-service-do-i-use
The password of a Hosted Exchange user is managed by an administrator in EdgePilot and reset when required. This is necessary, for example, if the previous password is no longer known, can no longer be used or needs to be renewed due to a password expiry notification.
Important Difference Between the Administrator and Mailbox User
With Hosted Exchange, the EdgePilot administrator, mailbox password and MY user are separate credentials.
- The EdgePilot administrator manages users, passwords, policies and services.
- The mailbox user signs in to Outlook, OWA or mobile devices using their email address and password.
- The MY user is used to manage subscriptions and is not the same as the Hosted Exchange administrator.
Requirements
To reset a Hosted Exchange password, you need:
- an EdgePilot user with administrator permissions
- the credentials of the administrator user
- access to the configured two-factor authentication
You can find further information about administrator permissions in the following article:
https://www.green.ch/en/how-do-i-assign-admin-permissions-to-a-user
Reset a User’s Password
Open the EdgePilot administration portal:
- Sign in with your administrator user.
- Confirm the sign-in using the SMS code or the Authenticator app.
- Open Users.
- Open User Management.
- Select the desired user.
- Enter the new password in the Change Password section.
- Check whether the password complies with the applicable password policies.
- Click Update User Details.
The new password is saved and replaces the user’s previous password.
Test the New Password
Test the new password through Outlook Web Access (OWA) immediately after changing it.
https://ch.exg7.exghost.com/owa
If the sign-in to OWA works, the password has been applied on the server.
If Outlook, Apple Mail, mobile phones or other applications still do not work, the old password is often still stored there.
Update the Password on All Devices
After resetting the password, you should update the new password on all devices and in all applications.
These include, for example:
- Outlook
- Apple Mail
- iPhone and iPad
- Android devices
- other email applications
- other applications with access to the mailbox
If devices continue to use the old password, this may result in repeated password prompts and authentication errors.
Password Expiry Notifications
Hosted Exchange can automatically notify users that their password should be renewed.
These notifications depend on the password policy configured for the organisation.
By default, a period of 1000 days is configured in the documented Hosted Exchange policies.
The following periods can be selected:
- 90 days
- 180 days
- 1000 days
A shorter period can be selected to increase security.
Adjust the Password Policy
- Sign in to EdgePilot with an administrator user.
- Open Exchange.
- Open Policies.
- Select the desired period under Default Policy.
- Click Save Default Policy.
User-specific password policies can also be created.
- Open User-Specific Rule.
- Click Add Rule.
- Configure the desired policy.
- Confirm the creation by clicking Add Rule.
You can find further information in the following article:
https://www.green.ch/en/hex-password-expiry-messages
Change a Password and Reset a Password
Changing and resetting a password are different processes.
- Change password: The current password is known or the user is already signed in.
- Reset password: An administrator assigns a new password because the previous password is no longer known or can no longer be used.
For Hosted Exchange, the password should be managed centrally through User Management in EdgePilot.
No Access to the Administrator User
If the credentials of the EdgePilot administrator are no longer known, user passwords can no longer be reset through User Management.
Note: If access to the EdgePilot administrator is no longer possible, contact support. In this case, the administrator access must be reset and provided again by Green.
No Access to Two-Factor Authentication
Two-factor authentication is used for administrator users.
If no SMS code is received or access to the configured Authenticator app is no longer available, the sign-in may be blocked.
Note: If access to the administrator user’s two-factor authentication is no longer available, contact support.
Security Information
Always access the EdgePilot administration portal directly when changing passwords.
Do not open buttons or links from unexpected emails.
This reduces the risk of entering credentials on a phishing page.
You can find further information about phishing in the following article:
https://www.green.ch/en/current-phishing-campaigns
You can find further information about secure passwords in the following article:
https://www.green.ch/en/secure-password
Related Articles
Hosted Exchange overview:
https://www.green.ch/en/all-about-hosted-exchange
Change password:
https://www.green.ch/en/hex-change-password
Password expiry notifications:
https://www.green.ch/en/hex-password-expiry-messages
Connection details and instructions:
https://www.green.ch/en/read-hex-connection-data-and-instructions/links
Adjust Time Period
The EdgePilot administration portal allows you to choose between the following periods:
- 90 days
- 180 days
- 1000 days
By default, a period of 1000 days is selected. If you want to increase security, we recommend changing the value to 90 days.
To check and, if necessary, adjust the value, sign in to the EdgePilot administration portal with an admin user.
In the EdgePilot user interface, navigate to Exchange. In the Exchange submenu, click Policies.
In the “Default Policy” field, open the drop-down menu. Select the desired time period.
Click the green “Save Default Policy” button.
User-Specific Rule
You also have the option to define your own password policies.
Select the “User-Specific Rule” field. Click the green “Add Rule” button.
Here, you have several options for creating your own custom password policy.
To confirm the creation, select “Add Policy” again.