ADSelfService Plus lets users reset Active Directory passwords from the Windows login screen using a logon agent, eliminating help desk dependency. Users verify identity with CAPTCHA and MFA, create policy-compliant passwords, and regain access instantly. It also supports SSO, password sync, notifications, and endpoint MFA.
In this how-to video, we will be looking at how the self-service password reset feature empowers users to reset their Active Directory system passwords without help desk assistance. This feature lets Active Directory domain users reset their passwords right from their desktop login screens using the Windows login agent. The login agent, once installed on the users' machine, enables password reset and account unlock option on their login screens.
When a user wants to log in to their Windows account and has forgotten their password, they can choose to reset it right from the login screen. Let's dive into the password reset process. In the Windows login screen, click the Reset Password / Unlock Account icon. We will be redirected to ADSelfService Plus. On clicking the Password reset icon, users can type in their username and select their domain.
Administrators can add CAPTCHA to every step of the password reset process for security. Now, user identity is verified with multi-factor authentication using authentication methods configured by the admin. Administrators can choose from more than 15 authenticators and set up three methods during password reset.
Here, Microsoft authenticators and security questions are used. First, in the security question answer page, answers to security questions are entered. Then, in the Microsoft Authenticator page, the time-based code generated on the Microsoft Authenticator app is entered in the field provided. Finally, a new password that satisfies the custom granular password policy is entered. The user has to re-enter the password before confirming this action. The password reset is then successful.
This new password can now be used to log in to the Windows 10 machine. ManageEngine ADSelfService Plus is an integrated self-service password management and single sign-on solution that offers features like Self-service password reset and account unlock, endpoint multi-factor authentication, Single sign-on to enterprise applications, Active-directory based multi-platform password synchronization, password expiration notifications, and password policy enforcer. To learn more about ADSelfService Plus, check out our website. You can find the link in the description below. For any questions on the product, just leave us a comment.
