Self Service Password Management
Frequent password resets coupled with a complex password policy, pave way for a secure environment but remembering these passwords is indeed a challenge for a domain user, leading to frequent Account Lockouts. ADSelfService Plus web based self service end user account unlock solution allows a domain user to self unlock his Active Directory account through a web browser and from any remote machine in the domain securely, and with ease.
Allow domain users to self unlock account
Several attempts of incorrect logins forces an LDAP account lockout. Calling a helpdesk technician to unlock your account adds as an additional ticket to the support staff and forces users to wait unproductively until the ticket is attended. ADSelfService Plus software saves users from frustrating and unproductive waits for helpdesk to unlock locked out accounts. This end-user self-service tool allows users to manage accounts on their own by allowing them to securely unlock their account from a web console by answering a set of validation questions and also without revealing his identity password information.
Identity Verification in ADSelfService Plus
For any self-service software, the foremost duty is to establish the identity of the user requesting account unlock self-service. ADSelfService Plus employs two techniques in order to verify and establish the identity of a user:
In the first case, the user answers a set of predefined security questions and in the second method, the user has to successfully reproduce the verification code sent to his mobile or e-mail id to establish his identity. You can choose to exercise both these user identification methods for enhanced security. Learn more about the need and benefits of Identity Verification process.
Enrollment for an account unlock
An Administrator notifies all users in the domain to enroll with ADSelfService Plus with the bulk emailing facility in the software. The users can enroll into the web console by selecting from a list of preset questions and providing corresponding answers to them. The user can define his own set of questions also. The administrator can limit the number and types of questions that an enduser has to conform. He can ensure a secure enrollment process by configuring settings from the admin console of ADSelfService Plus.
Enrollment authorizes end-users to self-service their AD passwords/accounts/profiles.
The various configuration options available for an Administrator during the enrollment process are,
Administrators can also choose to enable SMS/E-mail verification code check. Enrollment is not required should you choose only SMS/E-mail verification code, as ADSelfService Plus automatically collects the required information (mobile number and e-mail id) of the user from Active Directory.
Generate Reports on Account Lockout Status
Reports on accounts and password status arms the administrator to take proactive measures and inform users on their password status. ADSelfService Plus facilitates generation of comprehensive reports on Locked out users, Soon to expire password users, and Password expired users. The reports provide information on account and password status.
Schedule email notification on Account Status
ADSelfService Plus provides domain users automated soon to expire password notifications that notify users of an impending password expiry via email. Forewarning users prevents account lockouts due to password expiry by proactively advising them change their passwords.
Save your users from frustrating account lockouts due to expired Windows passwords in your LDAP. Lower support calls, keep users productive, and reduce the added overhead costs associated with supporting a change-password windows environment. ADSelfService makes a self service end user account unlock possible using a web browser from any remote machine in the network.
Multi-platform Password Synchronizer
Synchronize Windows Active Directory password/account changes made using ADSelfService Plus across multiple platforms. When a user makes changes to his Windows Active Directory password/account using ADSelfService Plus, the changes are automatically reflected in other systems too. If a user unlocks his Windows AD account through ADSelfService Plus, his locked out accounts in other systems, if any, will also get automatically unlocked. Learn more about Password Synchronizer.