The dual control option provides an added level of security for users resetting passwords for other users. It ensures that no single user knows or controls the password of another user.
This option requires that two users participate when resetting the password of a user other than themselves. Each user defines a portion of the password. The reset password then becomes the union of the two passwords.