ManageEngine ADSelfService Plus vs Thycotic Password Reset Server
The prime objective of a self-service password reset software is to allow end-users to securely reset their passwords and unlock their accounts without help desk intervention. This reduces password-related calls to the help desk and helps your business save on cost.
ManageEngine ADSelfService Plus and Thycotic Password Reset Server are two different software products that serve this purpose. The following comparison juxtaposes the features of these two solutions to help you make an informed decision on which software best fits your business needs.
Six reasons why ADSelfService Plus is better
| Multi-Platform Support |
|
| Password Synchronizer |
|
| Single Sign-On (SSO) for Enterprise Applications |
|
| Password Policy Enhancer |
|
| Complementary Self-Service Features |
|
| Mobile Apps |
|
ManageEngine ADSelfService Plus Key Features
| Features | Description | ManageEngine ADSelfService Plus Try now |
Thycotic Password Reset Server | ||
|---|---|---|---|---|---|
| Password Reset | Users can reset their forgotten passwords without calling help desk. | ||||
| Account Unlock | Users can unlock their locked out accounts without calling help desk. | ||||
| Password Expiration Notification | Notify users to change password before it expires via email. |
(Supports both email & SMS notifications) |
(Only email; available in Thycotic’s Secret Server product) |
||
| Account Expiration Notification | Notify users and their managers about impending acccout expiration. | ||||
| AD Attribute SelfUpdate | Employees can update their profile information (AD attributes) in Active Directory. | ||||
| Password Synchronizer | Synchronize Windows password changes with onpremises and SaaS applications. | ||||
| Enterprise SSO | Provide one-click access to enterprise applications by enabling AD-based SSO. | ||||
| Password Policy Enforcer | Blacklist weak passwords and create OU/group-based custom password policy rules including dictionary rule and pattern check. | ||||
| Two-Factor Authentication for Windows Logon | Add an extra layer of security for local and remote Windows desktop logons. |
(Available in Thycotic’s Secret Server product) |
|||
| Cached Credentials Update | Update the local cache stored in the users’ machine so that remote users can access their machine even if they forget their password. | ||||
| Mail Group Subscription | Users can self-request membership access to AD groups. | ||||
| Employee Search and Organization Chart | Users can search for their colleagues information and find their position in the organization hierarchy. | ||||
| Change Password | Users can change their password from anywhere, anytime. | ||||
| Accessibility | |||||
| Web portal | Allow users to access the tool from a web browser. | ||||
| Mobile Apps | Mobile apps to facilitate password management on the go. |
(Native Apps for Android & iOS) |
|||
| Password Reset Login Agent | Login agent that facilitates passwod reset from login screens. |
(Windows, macOS, and Linux) |
(only Windows) |
||
| Identity Verification | |||||
| Identity verification methods | Supported authentication methods for verifying users’ identities during the selfpassword reset process. |
|
|
||
| Approval workflow for password reset | Send password reset requests from end users to admins or managers for approval. | ||||
| Enrollment | |||||
| Enrollment Notification | Notify users through email, SMS or push notifications to enroll for password selfservice. | ||||
| Automatic Enrollment | Automatically enroll users by importing enrollment data from CSV or external DB. | ||||
| Forced Enrollment | Users are forced to enroll when they log in to their machines. | ||||
| Auditing users’ actions | |||||
| Audit reports | Reports that provide who, what, and when of users’ self-service activities. | ||||
| Reports on password status | Reports on soon-to-expire password users, password expired users, locked out users, etc. | ||||
| Other features | |||||
| OU and group-based policies | Provide users access to selfservice features based on their OU or group membership. |
(OU only) |
|||
| Integration with help desk tools | Integrate with help desk tool to automatically create tickets for users’ self-service actions. | ||||
| Integration with SIEM tools | Integrate with SIEM tools to forward logs. | ||||
| External Database Support | Reuse Security Q&A data of users from your in-house database. |
(supports PosgreSQL and MS SQL) |
|||
| License management | Restrict users from using the product and free up license. | ||||
Can the solution be considered value for money?
Component-based pricing model
The Standard edition starts at $ 595 for 500 users
The professional version starts at $ 1195 for 500 users.
Conclusion
- ADSelfService Plus offers everything that Thycotic does, plus a lot more. It is without a doubt the most powerful and feature-rich solution of the two. You cannot go wrong with ADSelfService Plus.
- Start your evaluation right away: Download 30-day free trial
- Need more information? Contact support@adselfserviceplus.com.
