How to configure ADSelfService Plus to run on a specific IP address

How to configure ADSelfService Plus to run on a specific IP address

Objective 

This article guides you through configuring ADSelfService Plus to run on a specific IP address on your server. This configuration is essential when you have multiple applications sharing the same server and need to assign dedicated HTTP (port 80) or HTTPS (port 443) port numbers to each of them. By binding ADSelfService Plus to a specific IP address, you can avoid port conflicts and ensure each application uses its intended port on its designated IP.

Prerequisites

  1. Administrative access to the machine running ADSelfService Plus
  2. A valid unused static IPv4 address to bind to ADSelfService Plus
  3. A backup of relevant configuration files before making any changes

Steps to follow 

Step 1: Add a virtual IPv4 address (if needed)  
If you do not already have a dedicated network interface card available, you'll need to add a virtual IP to your existing network adapter.
  1. Go to Start > Settings > Control Panel > Network Connections.
  2. Right-click Local Area Connection (or the appropriate network adapter) and select Properties.
  3. In the dialog box, select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
  4. Click Advanced.
  5. Under IP Addresses, click Add... and enter your new IP address along with the subnet mask.
  6. Click Add to confirm, then OK on all open windows to apply the changes.
Step 2: Bind ADSelfService Plus to the specific IP address  
  1. Stop ADSelfService Plus:
    • If running as an application: Navigate to Start > All Programs > ADSelfService Plus > Stop ADSelfService Plus.
    • If installed as a service: Open Run (Win + R), type services.msc, press Enter, then locate and stop the ManageEngine ADSelfService Plus service.
  2. Open the system_properties.conf file located in <ADSelfSelfService_Plus_install_dir>\conf (default: C:\ManageEngine\ADSelfService Plus\conf) using a plain text editor (e.g., Notepad or Notepad++).
  3. Add the following entry at the end of the file:
bindaddress=<ip_address>  
Example:bindaddress=192.168.111.162
  1. Save the file.
Step 3: Remove IP bindings (if the ADSelfService Plus IP was previously used by IIS)  
This step is necessary if the IP address you are assigning to ADSelfService Plus was previously bound by IIS, especially for ports 80 and 443.
  1. Open Command Prompt in elevated mode. Go to Start > Run, type cmd, then right-click Command Prompt and select Run as administrator.
  2. Execute the following command to remove any existing IIS bindings for that specific IP:
 netsh http delete iplisten ipaddress=<IP_address_of_ADSelfService_Plus>
 Example: netsh http delete iplisten ipaddress=192.168.111.162
  1. Restart IIS to apply the changes. You can do this by running iisreset in the elevated Command Prompt or through IIS Manager.
NotesNote: This ensures that IIS does not reserve the same IP, which could conflict with ADSelfService Plus. 
Step 4: Change the port number in ADSelfService Plus  
  1. Back up the server.xml file located at <ADSelfSelfService_Plus_install_dir>\conf (default: C:\ManageEngine\ADSelfService Plus\conf). This file contains the port configuration.
  2. Start ADSelfService Plus. (You might need to access it via its current IP and port for this step before it fully switches to the new IP.)
  3. Log in to the ADSelfService Plus portal with administrator credentials.
  4. Navigate to Admin > Product Settings > Connection.
  5. Under General Settings:
    1. Change the ADSelfService Plus Port [http] to 80.
    2. If SSL [https] is enabled, set its port to 443.
  6. Click Save. In the prompt that is displayed, click the Restart Now link to apply the new port settings. You can also restart the service manually from the services.msc menu on the server.

Validation and confirmation 

After completing the configuration steps:
  • Verify access: Try accessing ADSelfService Plus using the new IP address and the configured port: http://<new_IP_address>:port_number or https://<new_IP_address>:port_number.
  • Check other applications: Ensure that any other applications on the same server that use ports 80 or 443 are still accessible via their respective IP addresses or hostnames.

Troubleshooting tips   

If ADSelfService Plus fails to start:
  • Review the system_properties.conf file for any syntax errors.
  • Check the wrapper.log file (located in <ADSelfService_Plus_install_dir>\logs) for any errors.
  • Ensure the IP address you specified is valid and assigned to the server's network adapter.
Connectivity issues:
  • Verify that no firewall (e.g., Windows Firewall, a network firewall, or antivirus software) is blocking communication on the new IP address or ports (80 or 443).
  • Check IIS bindings using the command netsh http show iplisten to confirm that ADSelfService Plus's new IP is not listed under IIS bindings. If it is, repeat step three.
General
  • A server restart might sometimes be necessary to fully apply network-related changes.

Best practices   

  • Always back up configuration files before making any changes.
  • Use a dedicated IP address for each application to avoid conflicts and simplify management.
  • Monitor network connectivity and firewall settings after configuration.
  • Test thoroughly in a non-production environment first, if possible.

How to reach support             

If the issue persists, contact our support team here

                  New to ADSelfService Plus?

                    • Related Articles

                    • Bind ADSelfService Plus to run on a specific virtual IP address

                      Description You can configure ADSelfService Plus to run on specific IP address. Resolution Step 1: Create a virtual IP Address on the machine where ADSelfService Plus is running. Start → Settings → Control Panel → Open Network connection. Right click ...
                    • How to configure custom SMS provider in ADSelfService Plus?

                      ADSelfService Plus lets you use any one of the following methods to send an SMS: GSM modem Clickatell (built-in support) Custom SMS gateway Configuring custom SMS gateway You can configure a custom SMS gateway to send notifications and verification ...
                    • Configuring high availability in ADSelfService Plus

                      ADSelfService Plus utilizes automatic failover to support high availability in case of system and product failures. Essentially, this means that when the ADSelfService Plus service on one machine fails, another instance of ADSelfService Plus running ...
                    • ADSelfService Plus product startup issues

                      What do you need to know before troubleshooting You need to have administrator access to ADSelfService Plus. When you experience an error with ADSelfService Plus, check if these prerequisites are satisfied: Install ADSelfService Plus as a service ...
                    • Multi-factor authentication techniques in ADSelfService Plus

                      Let's take a look into the various authentication methods supported by ADSelfService Plus for enterprise multi-factor authentication (MFA). Why should you use MFA? Authentication based solely on usernames and passwords is no longer considered secure. ...