Security question resets
Hi there, I was wondering if it would be possible for us to have our enrolled users be required to reset/redo their security questions, say, once a year? We are finding that a lot of time people simply forget what the answers are to the questions and then end up calling our IT department anyways for a reset/unlock. If we could force them to update their security questions on an annual or semi-annual basis it would reduce the number of times people forget their answers. Thanks, Matt
ADSelfService Plus 5.3 Build 5319
Hello Everyone! The latest build of ADSelfService Plus – 5319 - is now available for download. The highlight of this release is the support for RSA SecurID to protect user login through two-factor authentication. Features Support for RSA SecurID to protect users logging into ADSelfService Plus through two-factor authentication. Issues fixed Fixed a vulnerability issue in two-factor authentication. IMPORTANT: Existing customers can upgrade to the latest build by downloading the ADSelfService
Questions on SMS Message and SMS License Alert Email
Morning, I have a couple of questions. 1) Is it possible to change the SMS alert message that is sent to users at all? If so how do I go about this. I have noticed that the generic built in message is 132 characters long which takes up two credits so I would like to see if I can cut this down to 70 or under to only take up 1 credit. 2) When reaching the threshold for the SMS messages an email alert is sent out which is fine. But is it possible to change the text on the message as it is slightly confusing
Solution for Problem in Change Password after Windows Security Update
Hello All, As some of our users reported here, there is an issue in the change password feature of ADSelfService Plus after Windows Security Update. End users trying to change their passwords will receive the message "Problem in change password". The logs will have the entry "{ERROR_CODE=800704f1, ERROR_MESSAGE=adssp.native.err.changepassword, ERROR_SEVERITY=SEVERE} This issue is caused by Windows update that was released few days ago. Note: This issue is not specific to the 5315 build and
Multi Domain Question
Afternoon, the current scenario I have is my client has multiple domains all running at various security levels. We have deployed manageeninge into the primary domain and so far this has been pretty successful. I am now being asked how we can roll this out to the other domains. Security are saying that we can't opening up the firewalls between the primary instance and the other domains. The only other option I can see is to setup another instance of ADSelfServicePlus which mean re-registration for
AD SelfService Plus URL config
I am attempting to setup the AD SelfServicePlus and am currently having an issue getting to the URL from the workstations. The URL is http://servername: 8888 and on the same location network as the workstations. When I attempt to go to the URL via a browser on my computer, I get the error “Page cannot be displayed.” What configuration piece am I missing? Does IIS need to be setup on the server that AD SelfServicePlus is running on? Do changes need to be made to my firewall for the 8888 port?
Contest: Win an iPad Mini 2 or $200 Amazon gift voucher!
Hello! It's that time of the year when we remember all that's spooky. Over the years, we have all come to fear several things. The dark, monsters under the bed, zombies, computers, wires, hackers...you get the drift. Network security has given us all a fright or two (or a hundred, but who's counting?). In the spirit of Halloween, we thought we could share our IT nightmares. Do take up our survey and let us know what scares you the most about network security. We're giving away an iPad Mini 2 and
Gina Client - Win2003 and win2008 servers - Issue -
Hello Team, We've installed the Gina Client in our win2003/2008 servers, but appear the pop up error when click to button This issues only appear in win2003/2008. I attached the screenshot.
ADFS 2.x and 3.x Integration
I found a post about ADFS integration that was last updated in 2015 by support stating that they were working on integration and I would like to know if there has been any progress with integration of ADSelfService Plus with ADFS 2.x and/or 3.x? We are looking at customizing the ADFS pages but want to see if instructions already exist that I'm not finding. Some of the things I'm pulling from to figure-out the integration. https://msdn.microsoft.com/en-us/library/ee895357.aspx?f=255&MSPPError=-2147217396
ADSS App Mobile force user to use Code validation
Hello Team, Currently we're using ADSS with option send link access to unlock and reset, but this is not enable on app mobile. When we try to unlock/reset from ADSS app.Mobile that send a email with CodeValidation and not the link like webaccess. Any ideas? thks,
Time difference
I love this tool. It's simple and quick and does the job. One question I have, though: I noticed that if a password expires at 7:30am, the notification adds 8.5 hours. Example: Expiry is 5/15/2015 at 7:31am Email Notification (using macro %DateTime%) says password will expire 5/15/2015 at 5:01pm. What might cause the 8.5 hour addition? Thanks! Whitney
Password Expiry Notification Macros
Hello, we are using ADSelfService for our global sites but we only want to use 1 server rather than deploy multiple instances of ADSelfService in various regions. The issue we have is that in North America we use the Date and Time format as YYYY-MM-DD and time with AM/PM. However, in Europe they use DD-MM-YYYY and military time. How can I accomplish this for our European users that need to be reminded. Is there a different macro? Thank you!
Importing users from AD
Hello, i'm using this file to import user from AD to ADSelfService Plus The problem is that two users stay with the mobile phone duplicated. I already delete them and import the file again and the problem persists Also if i change the email address field on Active directory these field is not updated on ADSelfService Plus Thank you
Default end user page
Hello, How can i reset the user logon page to the default settings?
GINA Deployment hangs
Hi There I am now frustrated the maximum! I am deploying the GINA APP from the server to the client machines. It hangs on "processing" and that's where it stays. If I check the software has successfully loaded on the machine but it does not update the server with "successfully installed". I have to stop the services, then start them again to then do another deployment. Please can you assist with what I am perhaps doing wrong?
Error in translated text. Possible to change?
Is it possible to change text in the interface myself or does this need to be done by the software developers? The reason I'm asking this, is because there's an error in the dutch translation on the unlock account page. If a user goes to the page https://<siteURL>/accounts/UnLock , the user is presented the screen below. The text should be 'Uw account ontgrendelen' and not what it shows now 'vergrendelen' (in dutch 'vergrendelen' means Lock and not unlock)
ADSelfService_Enroll.hta -message appears "Server unreachable , Right Now! ???
I wanted to update the ADSelfService_Enroll.hta file I have in group policy with the latest version (from the last patch I put on 11/20/2015)- I double clicked it to test it to see what my users will see and that message appears. The group policy version (7/20/2015) doesn't give any message - I'm not even sure it's working anymore. Any help? thank you, Jamie Brewer
P7B certificate installation
Hello, I'm having issues installing a p7b certificate. Could some please provide me the right procedure to do it. I follow this procedure (https://www.manageengine.com/products/self-service-password/kb/ad-self-service-plus-certificate-install.html) but using the export option bellow it gives the error: Keytool error: Java.lang.Exception: Input not an X.509 certificate. If i use the Base-64 encoded X.509 (.cert) i'm getting the follwing error
Problem Changing Password
We have a user that is unable to change her password. All the error message says is "problem changing password". We do have complexity requirements configured, so it could be as simple as not complying with one of those requirements, however since the error displayed is so generic, I am unable to determine what the issue is. How can I troubleshoot this issue? Is there debug logging that I can enable to see what the problem is? It would be great if the error message could be updated to be less
SMS Setting
Using SMS with Encryption , is it possible using Encryption in SMS message?? For Notification.
User Enrollment
Hello, It's possible for the administrator to enroll the users they want to, manually? And then the enrolled users use only the SMS method to unlock accounts and reset passwords? Without using security questions?
Self Service with Citrix Store Front
Hi, Does anyone know how to integrate the reset password link for AD Self Service with Citrix Store Front? I know you can do it with Outlook OWA, but want to know if there is a way to do with with Citrix Store Front (we are using Store Front v1.2)
Cannot get SSL to work in ADSelfService, after checking box for Enable SSL Port I Cannot get back into the console
I am trying to use our company's wildcard certificate on ADSelfService and I have followed instructions to the letter, but it never works. Every time I check the Enable SSL Port box in "Admin" console, edit the server.xml in /conf directory, I cannot get back into the console at all. I end up have to revert back to a previous snapshot to get back in. This is getting ridiculous.
Customise the GINA "Reset Password" and "Unlock Account" 'buttons'
I'm attempting to customise the colour of the "Reset Password" and "Unlock Account" buttons on the Windows login GINA page but to no avail. I know the customisation of the start page is handled in the "ResetUnlock.html" and I have already gone about updating the logo, button text font etc. but I am seemingly unable to see where I need to change the background colour of the two 'buttons'. I have already updated the "Re-branding" element of the "Admin" panel and have set the "Change Theme Colour" to
"The trust relationship between this workstation and the primary domain failed" after
Hello, I'm testing adselfserviceplus. I log on on it with one domain user and changed the password for that user. After i try to log on with this user on is computer with the new password i got the "The trust relationship between this workstation and the primary domain failed" error Is this issue normal when changing passwords? What can be done to avoid this issue? Thank you
Domain status query
Hi Team, I have added domain with user having domain admin rights. IN domain setting status is showing success as well. After that on that user I have given limited permission on AD however in Domain setting status it is still showing as success. Could you please let me know what could be the reason? Please refer the attached snap shots as well.
Password reset reports success but fails to go to DC
When we have certain Domain Controllers set as the first in the list. Password reset will report as success but we can find no matching communication of any kind that we can find. On the other hand password changes work. It appears to only happen to DCs running 2012 and up. v5208 Edit: I am pretty sure my issue relates to to the security patch known issue I am working on attempting to verify it.
How to add a license file to the AD SelfService if I can not get to the portal
I am a new network administrator and we have an AD Self Service redirected from Spiceworks portal set up by my predecessor. Our license has expired and we have a new license file but I can not find where to add the license file to allow for more than 50 users to use the portal. Does anyone have any words of wisdom on how to find the portal site so that I can add the new license? Thanks.
Wrong error text
Wrong error when changing password, when old and new password are two similar the error gives old password incorrect where can i change this.
one-time purchase (no annual license renewal) for AD Self Service Plus
We are NON-PROFIT organization and I am interested to purchase AD Self Service Plus Standard edition for 1000 users. Do you have SPECIAL pricing for NON-PROFIT organization? Do you have an option for one-time purchase (no annual license renewal) as compared with the competing products? Thanks.
AS400 Password Self Service
I am evaluating ADSelfService Plus for self service AS400 password reset. Would appreciated for the expert to share his/her experiences and issues. Thanks Kang
AD SelfService High Availability
Good Morning, Does AD Self Service have High Availability/ Failover capabilities? We were told that it was possible before purchasing it, but I am not seeing it within the configurations. I also did not see it within the Admin Guide. Is this something which will be added later? Or did I just miss the configuration within the application itself? We are hoping to configure all of the applications with High Availability/ Failover. Thank you for the help!
Minimum Permission
Hi Team, Can you please advise the minimum permission that can be used for service account? Which parts of domain controller is going to touch by ADSelfService plus and what are the minimum permission required to perform task by ADSelfService plus on Domain controller? Thanks Arjun
Build 5317 installation
How do we update to the localize buld 5317 if a previous build (actually 5315) is in use? Thank you Riccardo
Password Expiry Notification Enhancement
Request an option in the ADSelfService Plus' Password Expiry Notification feature to skip generating password expiration notices for any user where the "Smart card required for interactive login" has been enabled. Within our organization we have smart card enabled users and other who use ID/password. We're unable to segregate those users into separate OUs to control which receive password expiration warnings. Instead, it would be extremely helpful for us to simply have an option within the Password
PostgreSQL Database to Splunk
Our organization is attempting to export the ADSSP PostgreSQL Database data and import into Splunk. We are in the process of configuring it but need to know the following: The hostname of the PostgreSQL server. The name of the PostgreSQL database that DBConnect will be working with. Were exactly is the PostgreSQL database located Credentials (Username and Password) associated with the PostgreSQL database. Thank you, Oscar Fuentes
Password Sync Reports
Hello, I am curious if anyone is aware of a method in which I could generate a report of all users who has sync'd their AD credentials to that of the Oracle databases our clients login to. We have had a few complaints from users that their accounts have become unlinked on their own and we would like to see what might be causing this issue. As far as I can tell the only report I can generate shows Enrolled users, but this does not necessarily mean those users have their passwords sync'd.
Showing address on the search result
Dear experts, Is there a way to show all fields on the search results (Employee Search) For example, the address is not shown on the search result even the address is actually there for the particular user. Many thanks and best regards Aldi
Error: Couldn't start remote service. Overlapped I/O operation is in progress.
When I try to install the GINA remotely from the ADSelfSerfice admin console on a Windows 10 or Windows 8.1 computer the install fails with error: “Couldn't start remote service. Overlapped I/O operation is in progress.” The problem I see is the default remote registry setting is set to disabled and ADSelfService is not able to start the service since it’s disabled. If I set the remote registry setting to manual, then ADSelfService will start the service and the install will complete. We’re using
ADSelfService Plus 5.3 Build 5318
Hello Everyone! We are glad to announce the release of the latest version of ADSelfService Plus – build 5318. This release features audio CAPTCHA, enhanced ServiceDesk Plus integration, and a number of important enhancements and bug fixes. Features Audio CAPTCHA support for easier accessibility. ServiceDesk Plus integration now allows you to automatically create tickets for end user self-service actions in the help desk software. Enhancements Now acknowledgement notifications can be sent for enrollment,
Next Page