you have 200 computers that run windows 10. the computers are joined to microsoft azure active directory (ad) and enrolled in microsoft intune. you need to enable self-service password reset on the sign-in screen. which settings should you configure from the microsoft endpoint manager admin center