If you enabled password write-back under Azure Active Directory > Password Reset > On-premises Integrations
Then you can reset them in Azure and they should sync back the hashes to your on-prem DC(s)
Then you can do password resets through
SSPR provided you set that up too.