Bulk disenrollment of users in ADSelfService Plus

ADSelfService Plus offers admins the option to disenroll multiple users simultaneously, ensuring efficient license management and streamlined administrative tasks. This capability is especially useful during employee offboarding, role changes, or license reallocation, saving time and reducing errors compared to manual, one-at-a-time disenrollment.

You can disenroll multiple users simultaneously using the methods below:

1. Selecting multiple users from Enrollment Reports.
2. Importing users from a CSV file.

Method 1: Selecting multiple users from Enrollment Reports

1. Log in to the ADSelfService Plus admin portal with administrator or operator privileges and navigate to Reports > MFA Reports > MFA Enrolled Users Report.
2. Specify the domain using the Select Domain option.
3. Use the Select OUs option to specify the OUs, if necessary.
4. You can narrow-down the results based on MFA methods using the Enrollment Type drop-down.
5. Click Generate.
6. From the report generated, select the users to be disenrolled and click the Disenroll button.

   

Method 2: Importing users from a CSV file to disenroll

1. Log into ADSelfService Plus with admin or operator privileges and generate the MFA Enrolled Users Report using steps 1 to 5 of Method 1 above.
2. Click Bulk Disenroll on the right of the report header, near the navigation buttons.

   

3. In the pop-up that opens, choose a unique attribute based on which users to be disenrolled are to be identified from the Disenroll based on drop-down. It can be the sAMAccountName, Mobile Number, Mail ID, Secondary E-mail ID, or Secondary Mobile number of the users.
4. Upload a CSV file that contains the chosen unique attribute as the name of the column, and the attribute values of each user to be disenrolled, as an entry in the column.
5. Once the CSV file is uploaded, you can select the authenticators you want to disenroll the user(s) from, and click OK.
6. Click All Authenticators to disenroll the users from all authenticators.

That's it! You've now successfully disenrolled ADSelfService Plus users in bulk!

Like this tip? Get the most out of ADSelfService Plus by checking out more tips and tricks here.