Recovering users and systems

Resetting a remote user’s password or replacing the user's lost logon token requires a challenge and response procedure.