Pricing  Get Quote

Home > ManageEngine ADSelfService Plus vs

Thycotic Password reset server

Looking for an alternative to

Thycotic Password reset server

100000+ Technicians trust ManageEngine ADSelfService Plus to manage their Windows environment

Try ManageEngine ADSelfService Plus

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

    Download fully functional
    30-days FREE trial!

  • By clicking 'Start a free trial', you agree to processing of personal data according to the Privacy Policy.


One of our solution experts will get in touch with you shortly

ManageEngine ADSelfService Plus vs Thycotic Password Reset Server

The prime objective of a self-service password reset software is to allow end-users to securely reset their passwords and unlock their accounts without help desk intervention. This reduces password-related calls to the help desk and helps your business save on cost.

ManageEngine ADSelfService Plus and Thycotic Password Reset Server are two different software products that serve this purpose. The following comparison juxtaposes the features of these two solutions to help you make an informed decision on which software best fits your business needs.

Six reasons why ADSelfService Plus is better

Multi-Platform Support
  • Not just Windows Active Directory, ADSelfService Plus also supports password selfservice for Google Apps, Office 365, Salesforce, Zoho, IBM AS400, HP UX, Oracle DB and more.
  • Thycotic supports only AD and Office 365 for password resets.
Password Synchronizer
  • Using ADSelfService Plus, users’ passwords can be automatically synchronized with various enterprise applications and systems such as IBM iSeries, HP UX, Oracle DB, Salesforce, Office 365, and G Suite.
  • Thycotic doesn’t support password sync.
Single Sign-On (SSO) for Enterprise Applications
  • Using ADSelfService Plus, you can enable SSO for any SAML-based enterprise application.
  • Thycotic doesn’t support enterprise SSO.
Password Policy Enhancer
  • In ADSelfService Plus, you can force users to pick a strong password by blacklisting weak, common passwords by enabling custom password policy rules such as dictionary rule, pattern check, and more.
  • Thycotic doesn’t have this capability.
Complementary Self-Service Features
  • In additions to password reset and AD attribute self-update, ADSelfService Plus supports self-service group subscription, employee search, and organization chart to reduce access request time and further boost the self-service capabilities of users.
  • Thycotic supports only password reset and AD attribute self-update.
Mobile Apps
  • ADSelfService Plus provides native mobile apps for Android and iOS.
  • Thycotic doesn’t have mobile apps for self-service password management.

ManageEngine ADSelfService Plus Key Features

Features Description ManageEngine ADSelfService Plus
Try now
Thycotic Password Reset Server
Password Reset Users can reset their forgotten passwords without calling help desk.    
Account Unlock Users can unlock their locked out accounts without calling help desk.    
Password Expiration Notification Notify users to change password before it expires via email.  

(Supports both email & SMS notifications)


(Only email; available in Thycotic’s Secret Server product)

Account Expiration Notification Notify users and their managers about impending acccout expiration.    
AD Attribute SelfUpdate Employees can update their profile information (AD attributes) in Active Directory.    
Password Synchronizer Synchronize Windows password changes with onpremises and SaaS applications.    
Enterprise SSO Provide one-click access to enterprise applications by enabling AD-based SSO.    
Password Policy Enforcer Blacklist weak passwords and create OU/group-based custom password policy rules including dictionary rule and pattern check.    
Two-Factor Authentication for Windows Logon Add an extra layer of security for local and remote Windows desktop logons.    

(Available in Thycotic’s Secret Server product)

Cached Credentials Update Update the local cache stored in the users’ machine so that remote users can access their machine even if they forget their password.    
Mail Group Subscription Users can self-request membership access to AD groups.    
Employee Search and Organization Chart Users can search for their colleagues information and find their position in the organization hierarchy.    
Change Password Users can change their password from anywhere, anytime.    
Web portal Allow users to access the tool from a web browser.    
Mobile Apps Mobile apps to facilitate password management on the go.  

(Native Apps for Android & iOS)

Password Reset Login Agent Login agent that facilitates passwod reset from login screens.  

(Windows, macOS, and Linux)


(only Windows)

Identity Verification
Identity verification methods Supported authentication methods for verifying users’ identities during the selfpassword reset process.
  • Security Q&A
  • Email-based Verification Code
  • SMS-based Verification Code
  • RSA SecurID
  • Duo Security
  • Google Authenticator
  • AD-based Security Questions
  • Biometric Authentication
  • QR-based Authentication
  • Push Notification Authentication
  • Time-based OTP
  • Phone verification
  • Security Q&A
  • SMS verification
  • Graphical image recognition
Approval workflow for password reset Send password reset requests from end users to admins or managers for approval.    
Enrollment Notification Notify users through email, SMS or push notifications to enroll for password selfservice.    
Automatic Enrollment Automatically enroll users by importing enrollment data from CSV or external DB.    
Forced Enrollment Users are forced to enroll when they log in to their machines.    
Auditing users’ actions
Audit reports Reports that provide who, what, and when of users’ self-service activities.    
Reports on password status Reports on soon-to-expire password users, password expired users, locked out users, etc.    
Other features
OU and group-based policies Provide users access to selfservice features based on their OU or group membership.    

(OU only)

Integration with help desk tools Integrate with help desk tool to automatically create tickets for users’ self-service actions.    
Integration with SIEM tools Integrate with SIEM tools to forward logs.    
External Database Support Reuse Security Q&A data of users from your in-house database.  

(supports PosgreSQL and MS SQL)

License management Restrict users from using the product and free up license.    

Can the solution be considered value for money?

Component-based pricing model
The Standard edition starts at $ 595 for 500 users

The professional version starts at $ 1195 for 500 users.


  • ADSelfService Plus offers everything that Thycotic does, plus a lot more. It is without a doubt the most powerful and feature-rich solution of the two. You cannot go wrong with ADSelfService Plus.
  • Start your evaluation right away: Download 30-day free trial
  • Need more information? Contact

What customers say about us

  • CAMH will be able to save close to $26,000 a year on service desk calls related to Active Directory password resets and locked accounts, and will see a return on investment within the first six months of product implementation.

    Judy OlivierProject Manager, CAMH

About ManageEngine ADSelfService Plus

ADSelfService Plus is from the ManageEngine family where we are continuously dedicated to providing quality products and are constantly involved in adding new features and enhancements. ADSelfService Plus facilitates a switch between ManageEngine products using a Jump to option ADManager Plus and ServiceDesk Plus.

For more information about ManageEngine ADSelfService Plus, please visit
Get quote

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

Download fully functional30-days FREE trial!

    By clicking 'Claim Your Free Trial', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine ADSelfService Plus. We have received your request for a price quote and will contact you shortly.

Get a personalized Quote,that best suits your requirements

  • Add-ons

    Failover and Secure Gateway Services
    Includes failover (high availability, load balancing) and secure gateway services (reverse proxy) that are essential for large enterprises.
    SMS Pack
    Allows you to use Clickatell, a third-party SMS gateway, to send notifications and MFA verification code via SMS.
    (No. of SMS Credits *)
  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine ADSelfService Plus. We have received your request for a personalized demo and will contact you shortly.

Schedule apersonalized web demo

  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Disclaimer: ManageEngine does not guarantee the accuracy of any information presented in this document, and there is no commitment, expressed or implied, on ManageEngine’s part to update or otherwise amend this document. The furnishing of this document does not provide any license to patents, trademarks, copyrights or other intellectual property rights owned or held by ManageEngine.

ADSelfService Plus trusted by

A single pane of glass for complete self service password management
Email Download Link