Issue description
The ADSelfService Plus application is inaccessible to users, preventing access to self-service features such as password resets, account unlocks, or portal access. This downtime can impact productivity and increase the help desk load.
Possible causes
A stopped service: The ADSelfService Plus Windows service is not running on the host server.
Blocked application ports: Essential application communication ports (e.g., 80/443 for HTTP/HTTPS) on the host server are blocked by local firewalls or network proxy servers.
Database connectivity issues: ADSelfService Plus cannot connect to its external database, such as Microsoft SQL Server, PostgreSQL, or MySQL (if applicable).
High availability (HA) misconfiguration: In HA environments, the application must be accessed via the virtual IP (VIP) address, which dynamically binds to the active server. Accessing the application via the server’s IP address or hostname may result in failure, especially after a failover.
Load balancer (LB) misconfiguration: In an LB environment, there might be a mismatch in the allowed ports, preventing traffic from reaching the ADSelfService Plus server.
Prerequisites
Resolution
Step 1: Verify server accessibility
Open Command Prompt on your computer.
Type ping <server-name or IP address> and press Enter. Example: ping 192.168.1.10 or ping myserver.example.com
If you receive a series of Reply from messages, it indicates that the server is up and reachable.
If you see errors like Request timed out or Destination host unreachable, the server may be down, disconnected from the network, or blocked by a network-level firewall. Address server and network infrastructure issues before proceeding.
Step 2: Check the ADSelfService Plus service status
Open services.msc on the ADSelfService Plus server.
Locate the service named ManageEngine ADSelfService Plus.
Check the Status column:
If it says Running, the service is active.
If it is blank or says Stopped, the service is not running. Right-click the service and select Start.
Note: After starting, wait a few minutes for the application to fully initialize before attempting access. Step 3: Confirm that the essential ports are open
ADSelfService Plus typically uses 8888 (HTTP) and 9251 (HTTPS) by default, or 80 (HTTP) and 443 (HTTPS) if configured.
Open the wrapper log located in <installation directory>/logs.
Review it for details on the reason for the failure.
Step 4: Validate the database connectivity (if using an external database)
Check the basic network connectivity to the database server:
Test the database port connectivity using Telnet:
Try logging in to the database:
Use a database client tool like SQL Server Management Studio for Microsoft SQL Server or pgAdmin for PostgreSQL.
Try connecting using the database server address, port, username, and password.
If the login fails, verify that:
Step 5: Address HA- or LB-specific issues
For HA setups:
Always ensure you are accessing the application via the VIP address, not individual server IP addresses or hostnames.
Verify the status of both nodes in your HA setup and ensure the VIP has successfully failed over to the active node.
For LB setups:
Verify the configuration.
Ensure that the configured ports are reachable and that network traffic is successfully routed to the ADSelfService Plus server without any intermediate blockages or misconfigurations.
Step 6: Review the application logs for errors
ADSelfService Plus generates detailed logs that can pinpoint the exact cause of the application being down.
Navigate to the <ADSelfService Plus Installation Directory>\logs folder.
Look for recent error messages in files such as the following:
These logs can indicate specific issues like database connection failures, port conflicts, out of memory errors, corrupted files, or other critical application errors.
How to reach support
If the issue persists, contact our support team here.