Windows 10 devices that are domain-joined to both on-premises AD and cloud Azure AD allow user self-service password reset from the sign in screen. This can be enabled through a device configuration policy in Microsoft Intune or by configuring a registry key.
Learn more