Should a user be logged in after resetting their password?

1. What happens after you reset a user's password?
2. Why do users need to provide their password twice?
3. Why would someone reset your password?
4. Why do administrators ask users to change their password during the first login?

What happens after you reset a user's password?

After changing a password

After you reset a password and sign-in cookies, the user is signed out of all active sessions. To reopen their apps, the user needs to complete the following actions: Google web apps (such as Gmail or Google Drive)—The user has to sign in again with their new password.

Why do users need to provide their password twice?

It is to avoid typos. If you have to type the password twice chances are you'll make your password what you want. They want to avoid having people whose password is "blah" having to retrieve their password later on because they typed "blaj" by mistake.

Why would someone reset your password?

If someone keeps trying to request a password reset, your email address can be fetched by malware, phishing emails, or attacking Internet sites. Run anti-virus/anti-malware scans on your computer. Make sure not to post your email address publicly or subscribe to suspicious web pages.

Why do administrators ask users to change their password during the first login?

Forcing users to select their own password at initial logon, (the first time they authenticate), ensures that NOBODY else knows the password for the account once it has been changed. This is a control process called single-control.