Forum Discussion

KevHal's avatar
KevHal
Iron Contributor
Aug 21, 2026

Windows App - you can't get there from here

Hi, Since moving to Windows App (The issue did not occur on the old Remote Desktop client), users when they come to do the 90 day forced SSPR (Company policy), it pops up with a message that you can...
Kidd_Ip's avatar
Kidd_Ip
MVP
Aug 22, 2026

Try this:

 

  1. Exclude “Microsoft Graph Password Reset” Cloud App from the Conditional Access policy enforcing device compliance.
    • In Entra ID > Security > Conditional Access > Cloud apps > Select “Microsoft Graph Password Reset”.
    • This exclusion allows Graph‑based SSPR flows while maintaining compliance for other Graph calls.
  2. Alternatively, perform SSPR via browser (Edge/Chrome) or Windows App Web — these clients satisfy Conditional Access differently and avoid the blocked Graph call.
  3. Do not revert to the legacy Remote Desktop client since it is unsupported after 27-Mar-2026 and no longer receives security updates.

 

https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview