When a user opens the Console and attempts to force reset a user's password they get the following error: "Unable to Change Password". (4248039)

When a user opens the Console and attempts to force reset a user's password they get the following error: "Unable to Change Password".

This error occurs rarely and randomly when using either ESSO 8.06 or 9.01 at any patch level. When a user opens the Console and attempts to force reset a user's password they get the following error: "Unable to Change Password". This error will continue to occur on any version of ESSO on any computer. Deleting the local ESSO cache has no effect. The issue can be fixed by removing the user's "help desk" rights from the console and immediately re-adding them.

These Administrators using the Enterprise SSO console have the Helpdesk operator role with User: Password modification right. Typically, this problem may occur in two different situations.

1. The administrator password has been changed outside the Enterprise SSO solutions.  So, they are unable to decipher the administration key with their new password.
2. The ESSO administrator changes their primary password regularly (with ESSO installed) but has no secondary account stored in SSOEngine.

To resolve this 1st issue you would either need to delete the administration profile of this user and re-create it.

To prevent the 2nd situation, a workaround is for the ESSO administrator to have at least one account stored in SSO.