We are trying to set up process for new users and do the following:

1) New User policy is set to "OU_1" (OU = organizational unit) with only two defined questions for activation and reset password purpose only

2) After new user successfully reset password, user will be moved to different OU named "OU_2" to have different set of security questions for unlock, change or reset password purpose only

3) User should log back in with new password to select three (3) new questions of their choice as defined under "OU_2" policy

For #2 above, we figured this could be done in the Post Action section to use a script to move user to different OU.  But the issue here is that when user log back into AD Self Service Plus, user sees the same set of 2 questions.

How do you suggest us to do this?  How does other organizations do their processes for new users?

Rick