In an offline system what is the preferred method of resetting a user's password?
Usually this would be handled with an emailed password reset link. However this system is offline, there is no access to email.
My first thought is that an administrator would reset the password, then communicate the new password to the affected user, who would use it to log in and then be forced to enter a new password.
The shaky part of this is how should the password be communicated to the user? Presumably on a piece of paper. That doesn't seem great.
My second thought is that an administrator would simply clear the password, allowing the user to log in with no password (possibly for a limited time), and then be forced to enter a new password.
I'm not sure that's right either.
Is there some standard process for this? I'm keen to avoid some contrived roll-your-own approach.
EDIT: One point I should have clarified is that this system could have as few a one (shared) computer (managed by a group of administrators). User's won't have their own devices. The advice posted before this clarification is still useful though, so thank you.