Automate Active Directory password reset and account unlock

Automate Active Directory password reset and account unlock

Automation Tab

Automate Active Directory Password Reset and Account Unlock

Automatic Reset & Unlock

The first option – Automatic Reset & Unlock – aids in the creation of password reset/account unlock scheduler, which will automatically reset the expired passwords and unlock the locked accounts of end users.

Steps to configure a password reset scheduler

  1. Log in to ADSelfService Plus and go to Configuration > Policy Configuration > Advanced.
  2. Click the Automation tab in the new window that opens up.
  3. Enable the Automatically resets domain user’s passwords when they expire checkbox.
  4. Set the Frequency for the scheduler. The available options are Daily, Weekly, Monthly and Hourly.
  5. Select the method in which the new password has to be generated using the options under the Reset Password to setting.
  6. Click OK to save the settings.

Automate Active Directory Password Reset and Account Unlock

Note:
  • The new password can either be a custom text of your choice or an automatically generated password based on the password policy.
  • The new passwords will be sent via email/SMS to end users.

This setting, when configured, will save users the trouble of remembering their impending password reset dates.

Steps to configure an account unlock scheduler

  1. Log in to ADSelfService Plus and go to Configuration > Policy Configuration > Advanced.
  2. Click Automation tab in the new window that opens up.
  3. Enable the Automatically unlocks locked down accounts in your domain checkbox.
  4. Set the Frequency for the scheduler. The available options are Daily, Weekly, Monthly and Hourly.
  5. Click OK to save the settings.

Automate Active Directory Password Reset and Account Unlock

Note: The users will be communicated about their accounts being unlocked via email/SMS.

DC Updater

The second option – DC Updater – is used when the user is confronted with a replication problem. The DC Updater, in the event of a replication delay, will automatically update the current password and account status of the user on all domain controller machines.

                  New to ADSelfService Plus?

                    • Related Articles

                    • ADSelfService Plus self-service password reset configuration: Part 1

                      Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...
                    • Advanced policy configuration: Password Sync tab

                      Password Sync tab Password Synchronizer Automate password synchronization with users' linked accounts after the performed self-service action (password reset or password change) is reflected in AD. Automate the unlocking of accounts for users' linked ...
                    • Modify the password policy requirements text displayed on screen in ADSelfService Plus

                      Description ADSelfService Plus, by default, displays the password policy requirements (domain or fine-grained password policies) of a user in the change password and reset password screen. If you prefer to customize the password policy messages to ...
                    • Setting limits for password reset and account unlock actions

                      ADSelfService Plus now allows you to set a limit for the number of self-password resets and account unlocks users can perform in a given number of days. For example, you can limit the password resets to a maximum of 5 times a month for a user. To do ...
                    • Microsoft 365 password reset

                      The Self-Service Password Reset (SSPR) feature in Azure AD allows users to reset their passwords without going through the help desk. However, changes to users' Azure AD passwords are only synchronized with their on-premises domain accounts when ...