Bulk disenrollment of users in ADSelfService Plus

Bulk disenrollment of users in ADSelfService Plus

ADSelfService Plus offers administrators the convenience of performing bulk disenrollment of users. This feature allows them to manage user’s licenses effectively and also not be pushed to the extent of disenrolling users one at a time. Administrators can choose between the following two options to perform bulk disenrollment:

  1. Select multiple users from MFA Enrolled Users Report.
  2. Import users from a CSV file.

Method 1: Select multiple users from Enrollment Reports

  • Log into ADSelfService Plus as an administrator.
  • Navigate to Reports > MFA Reports > MFA Enrolled Users Reports.
  • Select the desired Domain(s) or OU(s).
  • Select the Enrollment Status based on requirements.
  • Filter the Enrollment Type based on the authentication methods that users are enrolled to.
  • Click Generate.
  • From the report generated, select the users to be disenrolled and click the Disenroll button.                                                                                                                                                                                                                                 
  • In the Bulk Disenroll tab that opens, use the Disenroll from drop-down to select the authenticators you want users to be disenrolled from.                                                     
  • Click OK.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 

Method 2: Import users from a CSV file to disenroll

  • Log into the ADSelfService Plus console as an administrator
  • Navigate to the Reports > MFA Reports > MFA Enrolled Users Reports.
  • Select the desired Domain(s) or OU(s).
  • Select the Enrollment Status based on requirements.
  • Filter the Enrollment Type based on the type of enrollment performed for the users.
  • Click the Bulk Disenroll button.                                                                                                                                                                                                                                                                                                                                         
  • In the Bulk Disenroll pop-up, select the AD attribute by which the disenrollment will be based on in the Disenroll based on drop-down list.
  • In the Select the CSV file field, click Browse to upload a CSV file containing the enrolled users list.
  • Select a method of File Encoding from the drop-down list (By default it is UTF-8).
  • Click Import.                                                                                                                                                                                                                                                                                                                                                                   
        
You've now successfully disenrolled ADSelfService Plus users in bulk.

                    New to ADSelfService Plus?

                      • Related Articles

                      • How to enable offline MFA in ADSelfService Plus

                        ManageEngine ADSelfService Plus supports offline multi-factor authentication (MFA) for Windows machine logins, User Account Control (UAC) prompt elevation, and Remote Desktop Protocol (RDP) server authentication when the product server is ...
                      • ADSelfService Plus Text Customization

                        The Language Customization feature in ADSelfService Plus lets you customize any text in the self-service password reset software that is displayed in the user interface. Tooltips, error messages, buttons, and text fields can be customized to suit ...
                      • How to automatically enroll users with ADSelfService Plus?

                        Privileges The ADSelfService Plus server should have permission to access the external database server. SELECT privilege over the database table(s) for the user account that will be querying the external database. This should be an account in the ...
                      • Encryption and data storage in ADSelfService Plus database

                        Encryption in the ADSelfService Plus database ADSelfService Plus' database uses the following encryption methods to store sensitive data: Database Encryption method PostgreSQL AES-256-CBC Microsoft SQL AES-256-CBC The following sensitive information ...
                      • Configuring high availability in ADSelfService Plus

                        ADSelfService Plus utilizes automatic failover to support high availability in case of system and product failures. Essentially, this means that when the ADSelfService Plus service on one machine fails, another instance of ADSelfService Plus running ...