diff --git a/IRaCIS.Core.Application/IRaCIS.Core.Application.xml b/IRaCIS.Core.Application/IRaCIS.Core.Application.xml
index 466f53f7a..2864205dd 100644
--- a/IRaCIS.Core.Application/IRaCIS.Core.Application.xml
+++ b/IRaCIS.Core.Application/IRaCIS.Core.Application.xml
@@ -2058,6 +2058,14 @@
             <returns></returns>
             <exception cref="T:IRaCIS.Core.Infrastructure.BusinessValidationFailedException"></exception>
         </member>
+        <member name="M:IRaCIS.Application.Services.UserService.AnonymousSetPassword(System.Guid,System.String)">
+            <summary>
+             （未登陆） 设置新密码
+            </summary>
+            <param name="userId"></param>
+            <param name="newPwd"></param>
+            <returns></returns>
+        </member>
         <!-- Badly formed XML comment ignored for member "M:IRaCIS.Application.Services.UserService.ModifyPassword(IRaCIS.Application.Contracts.EditPasswordCommand)" -->
         <member name="M:IRaCIS.Application.Services.UserService.GetUserList(IRaCIS.Application.Contracts.UserListQueryDTO)">
             <summary>
diff --git a/IRaCIS.Core.Application/Service/Management/UserService.cs b/IRaCIS.Core.Application/Service/Management/UserService.cs
index e7d43d42e..fe795cb18 100644
--- a/IRaCIS.Core.Application/Service/Management/UserService.cs
+++ b/IRaCIS.Core.Application/Service/Management/UserService.cs
@@ -161,8 +161,16 @@ namespace IRaCIS.Application.Services
         /// <returns></returns>
         [HttpGet("{userId:guid}")]
 
-        public async Task<IResponseOutput> ResetPassword(Guid userId
+        public async Task<IResponseOutput> ResetPassword(Guid userId)
+        {
+            var success = await _userRepository.UpdateFromQueryAsync(t => t.Id == userId, u => new User()
+            {
+                Password = MD5Helper.Md5(StaticData.DefaultPassword),
+                PasswordChanged = false
+            });
 
+            return ResponseOutput.Result(success);
+        }
 
 
 
@@ -247,7 +255,12 @@ namespace IRaCIS.Application.Services
         }
 
 
-
+        /// <summary>
+        ///  （未登陆） 设置新密码
+        /// </summary>
+        /// <param name="userId"></param>
+        /// <param name="newPwd"></param>
+        /// <returns></returns>
         [AllowAnonymous]
         [HttpGet("{userId:guid}/{newPwd}")]
         public async Task<IResponseOutput> AnonymousSetPassword(Guid userId, string newPwd)