My user used the single sign-on extension of Apple Kerberos to synchronize the AD password to the local password. However, once the user forgot the local password and AD password of his computer, which caused him to fail to log in to the system. When I logged in with the hidden administrator created by DEP, I could not change the password of the user's local account. The device is not logged in to the Apple ID, is there any other way to help the user reset the password?