We use admanager and admanager plus. I have a user that was in the self service password reset but we deleted her so she could remake her account. Usually what happens is they log back into the self service portal and they can create their credentials again so they can use it.. this time instead they are getting "they have been restricted" and are no longer listed as an enrolled user and no longer showing as un-enrolled simply just gone. They are still active in AD manager and we have re-synced self service password reset and still this user will not show back up in there.