Self-service account unlock tool for Active Directory and cloud applications

AD account lockout tool

It is a common practice for admins to enforce timely password changes and stringent password policies to ensure organizational network security. However, these security measures can adversely affect productivity when users forget their login passwords, causing frequent AD account lockouts.

ADSelfService Plus, an identity security solution with MFA, SSO, and password management capabilities, provides a self-service account unlock tool that allows local and remote users to unlock AD accounts and other cloud accounts without help desk assistance.

Around the clock self-service options for locked-out user accounts

ADSelfService Plus enables users to unlock their Microsoft, Google Workspace, or AD accounts from any location!

Stringent MFA techniques to secure self-service account unlocks

ADSelfService Plus allows admins to trigger a preconfigured authentication workflow once users initiate an account unlock. It comprises 20 different authentication techniques, including FIDO passkeys, biometrics, and YubiKey, which can be utilized to authenticate users during self-service account unlocks. ADSelfService Plus ensures the protection of confidential data by allowing admins to enforce different types of authentication techniques for different users based on their level of access to sensitive business data.

The following are some MFA methods that ADSelfService Plus supports to authenticate user identities:

Conditional access policies for enhanced security

The conditional access policies offered by ADSelfService Plus enable admins to configure context-based rules to step-up or step-down the authentication flow for self-service account unlock. These authentication factors can be altered based on various factors, such as the IP address, time of request, device used, and the geolocation of the user. In a scenario where an account unlock request is received from an untrusted IP address, the user can be asked to complete additional factors of identity verification, with biometrics being a mandatory verification factor.

Supported platforms for self-service account unlock

ADSelfService Plus supports the following user directories for self-service account unlock.

• AD
• OpenLDAP
• AD Lightweight Directory Services (LDS)
• Google Workspace
• Microsoft SQL Server
• Salesforce
• Microsoft 365
• IBM AS400
• HP-UX
• Oracle Database

Types of account unlock requests IT admins receive from end users

• My Active Directory account is locked. How do I unlock it?
• I have been locked out of my laptop because of a forgotten password.
• I am unable to access my work account.
• How do I unlock my AD account?
• How do I unlock my locked Active Directory account?
• My AD account keeps locking me out because of forgotten passwords.
• Can I unlock my own AD account?
• What to do if I've locked myself out of my laptop?
• What to do if I cannot unlock my laptop?
• How do I reset my laptop if I'm locked out?

ADSelfService Plus empowers your end users to unlock their own accounts right from their login screens, freeing IT admins from these routine account unlock queries.

Ensure 100% user enrollment for self-service account unlock

ADSelfService Plus requires users to complete MFA enrollment before they can use the account unlock tool. To ensure 100% user enrollment, ADSelfService Plus enables IT admins to:

• Invite users to enroll in MFA via email and push notifications.
• Force users to enroll when they log in to their machines with a persistent pop-up dialogue box.
• Utilize users' existing AD information for enrollment.
• Automatically enroll users by importing necessary enrollment data from an external database or using CSV files.

Learn more about enrollment

Benefits of self-service account unlock using ADSelfService Plus