Bulk disenrollment of users in ADSelfService Plus

Bulk disenrollment of users in ADSelfService Plus

ADSelfService Plus offers administrators the convenience of performing bulk disenrollment of users. This feature allows them to manage user’s licenses effectively and also not be pushed to the extent of disenrolling users one at a time. Administrators can choose between the following two options to perform bulk disenrollment:

  1. Select multiple users from MFA Enrolled Users Report.
  2. Import users from a CSV file.

Method 1: Select multiple users from Enrollment Reports

  • Log into ADSelfService Plus as an administrator.
  • Navigate to Reports > MFA Reports > MFA Enrolled Users Reports.
  • Select the desired Domain(s) or OU(s).
  • Select the Enrollment Status based on requirements.
  • Filter the Enrollment Type based on the authentication methods that users are enrolled to.
  • Click Generate.
  • From the report generated, select the users to be disenrolled and click the Disenroll button.                                                                                                                                                                                                                                 
  • In the Bulk Disenroll tab that opens, use the Disenroll from drop-down to select the authenticators you want users to be disenrolled from.                                                     
  • Click OK.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 

Method 2: Import users from a CSV file to disenroll

  • Log into the ADSelfService Plus console as an administrator
  • Navigate to the Reports > MFA Reports > MFA Enrolled Users Reports.
  • Select the desired Domain(s) or OU(s).
  • Select the Enrollment Status based on requirements.
  • Filter the Enrollment Type based on the type of enrollment performed for the users.
  • Click the Bulk Disenroll button.                                                                                                                                                                                                                                                                                                                                         
  • In the Bulk Disenroll pop-up, select the AD attribute by which the disenrollment will be based on in the Disenroll based on drop-down list.
  • In the Select the CSV file field, click Browse to upload a CSV file containing the enrolled users list.
  • Select a method of File Encoding from the drop-down list (By default it is UTF-8).
  • Click Import.                                                                                                                                                                                                                                                                                                                                                                   
        
You've now successfully disenrolled ADSelfService Plus users in bulk.

                  New to ADSelfService Plus?

                    • Related Articles

                    • How to enable offline MFA in ADSelfService Plus

                      ManageEngine ADSelfService Plus supports offline multi-factor authentication (MFA) for Windows machine logins, User Account Control (UAC) prompt elevation, and Remote Desktop Protocol (RDP) server authentication when the product server is ...
                    • ADSelfService Plus Text Customization

                      The Language Customization feature in ADSelfService Plus lets you customize any text in the self-service password reset software that is displayed in the user interface. Tooltips, error messages, buttons, and text fields can be customized to suit ...
                    • Bulk enrolling Duo Security-enabled users for password self-service

                      Enrollment is the only task that has to be completed before users can start enjoying the benefits of ADSelfService Plus password self-service. But many a time, administrators might have to constantly shoot out reminders urging users to enroll. Or ...
                    • Multi-factor authentication techniques in ADSelfService Plus

                      Let's take a look into the various authentication methods supported by ADSelfService Plus for enterprise multi-factor authentication (MFA). Why should you use MFA? Authentication based solely on usernames and passwords is no longer considered secure. ...
                    • Configuring high availability in ADSelfService Plus

                      ADSelfService Plus utilizes automatic failover to support high availability in case of system and product failures. Essentially, this means that when the ADSelfService Plus service on one machine fails, another instance of ADSelfService Plus running ...