We have a password reset page that gives you two options.
One says "If you are on the corporate network, the other says if you are on a remote machine and not on the corporate network."
Someone called, asked me what option to pick if they were working remotely from home and weren't on the corporate network.
At least they knew their username.