[Tips & Tricks] How to enable force enrollment of users based on their OU(s) and group(s) using login script with ADSelfService Plus?

[Tips & Tricks] How to enable force enrollment of users based on their OU(s) and group(s) using login script with ADSelfService Plus?

The Force Enrollment using Login Script feature of ADSelfService Plus allows users to forcefully enroll the un-enrolled users within the selected policies or domains with a login script. You can schedule the execution of a login script to enable force enrollment. Only after the enrollment they can access other resources in their machine. 

This feature also provides you with the ability to decide whether users of the entire domain or that of a selected organisational unit(s) and group(s) would be forced to enroll. This means, with this feature you can craft a strong deployment policy that fits your requirements to a T.

Steps involved:

  1. Login to ADSelfService Plus web console with admin credentials.
  2. Navigate to Configuration tab > Administrative ToolsQuick EnrollmentForce Enrollment using Logon Script.
  3. Enter the Scheduler Name and the Description.
  4. Enter the Message To Be Conveyed to the unenrolled users.                                                             
  5. Enable this scheduler only for select OUs and groups by selecting a policy from the Select Policy drop down list. Note: To create/edit a Policy, navigate to the Configuration tab > Self-ServicePolicy Configuration. You can either create a new self-service policy by clicking the +Add New Policy button, or edit the existing default policy. For detailed steps, click here.
  6. Set up a scheduler which runs the login script at a specific frequency (range: Hourly to Monthly) of your choice by clicking the radio button from the options provided. Also, select the time at which the notification would be displayed from the drop-down list.
  7. Select the Force users to enroll when they log in to the domain checkbox to force the un-enrolled users complete the enrollment process. If the checkbox is selected, users can only close the "Enrollment Reminder" after they are enrolled; otherwise, the message acts only as a reminder and can be closed.                                                                               
  8. Click Save.

You have now successfully set up a scheduler which runs the login script and forces users to enroll if they have not already. 

Happy enrolling! 

Like this tip? Get the most of ADSelfService Plus by checking out more tips and tricks here.

 

 

 



                New to ADManager Plus?

                  New to ADSelfService Plus?