Automate Active Directory password reset and account unlock

Automate Active Directory password reset and account unlock

Automation Tab

Automate Active Directory Password Reset and Account Unlock

Automatic Reset & Unlock

The first option – Automatic Reset & Unlock – aids in the creation of password reset/account unlock scheduler, which will automatically reset the expired passwords and unlock the locked accounts of end users.

Steps to configure a password reset scheduler

  1. Log in to ADSelfService Plus and go to Configuration > Policy Configuration > Advanced.
  2. Click the Automation tab in the new window that opens up.
  3. Enable the Automatically resets domain user’s passwords when they expire checkbox.
  4. Set the Frequency for the scheduler. The available options are Daily, Weekly, Monthly and Hourly.
  5. Select the method in which the new password has to be generated using the options under the Reset Password to setting.
  6. Click OK to save the settings.

Automate Active Directory Password Reset and Account Unlock

Note:
  • The new password can either be a custom text of your choice or an automatically generated password based on the password policy.
  • The new passwords will be sent via email/SMS to end users.

This setting, when configured, will save users the trouble of remembering their impending password reset dates.

Steps to configure an account unlock scheduler

  1. Log in to ADSelfService Plus and go to Configuration > Policy Configuration > Advanced.
  2. Click Automation tab in the new window that opens up.
  3. Enable the Automatically unlocks locked down accounts in your domain checkbox.
  4. Set the Frequency for the scheduler. The available options are Daily, Weekly, Monthly and Hourly.
  5. Click OK to save the settings.

Automate Active Directory Password Reset and Account Unlock

Note: The users will be communicated about their accounts being unlocked via email/SMS.

DC Updater

The second option – DC Updater – is used when the user is confronted with a replication problem. The DC Updater, in the event of a replication delay, will automatically update the current password and account status of the user on all domain controller machines.

                  New to ADSelfService Plus?

                    • Related Articles

                    • ADSelfService Plus self-service password reset configuration: Reset & Unlock tab

                      Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...
                    • Modify the password policy requirements text displayed on screen in ADSelfService Plus

                      Description ADSelfService Plus, by default, displays the password policy requirements (domain or fine-grained password policies) of a user in the change password and reset password screen. If you prefer to customize the password policy messages to ...
                    • Advanced policy configuration: Password Sync tab

                      Password Sync tab Password Synchronizer Automate password synchronization with users' linked accounts after the performed self-service action (password reset or password change) is reflected in AD. Automate the unlocking of accounts for users' linked ...
                    • Setting limits for password reset and account unlock actions

                      ADSelfService Plus now allows you to set a limit for the number of self-password resets and account unlocks users can perform in a given number of days. For example, you can limit the password resets to a maximum of 5 times a month for a user. To do ...
                    • Password Policy Enforcer configuration

                      ADSelfService Plus' Password Policy Enforcer empowers administrators to implement advanced password policy controls, such as banning weak passwords and disallowing keyboard sequences, for users' on-premises AD accounts and cloud accounts, including ...