I am working on large windows based network environment (Active Directory) and I have a requirement of implementing clear and secure password reset process for windows user. Especially management requested to use same process for all applications which are using in our factory.
Currently we ask them to raise help desk ticket and IT team will reset according to their request. But we have security issue on this process because if windows password is lost, he ask to raise ticket to another user. Therefore any user can request password change for someone else.
what would be technical solution and process to avoid this security issue and reset user password securely.