How to disable Reset Password/Account Unlock button on the Windows login screen
Objective
This article explains how to disable the Reset Password/Account Unlock button displayed on the login screen when the ADSelfService Plus login agent is installed. This is achieved by updating a specific registry key either manually or via a Group Policy Object (GPO).
Prerequisites
- Administrative privileges on the target machine
- Administrator access to the Group Policy Management Console (GPMC)
Steps to follow
Manual method : Update settings on a single machine
- Press Windows + R to open the Run dialog box.
- Type regedit and press Enter.
- If prompted by User Account Control, click Yes to allow the Registry Editor to make changes.
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ZOHO CORP\ADSelfService Plus Client Software.
- Locate the key named ShowADSSPTile.
- Modify the value of ShowADSSPTile to FALSE.
- Click OK.
Using a GPO: Update settings on multiple machines
Step 1: Create a new GPO
- Log in to the domain controller with administrative credentials.
- Press Windows + R to open the Run dialog box.
- Type gpmc.msc and press Enter to open the GPMC.
- On the left pane, navigate to Group Policy Objects.
- Right-click Group Policy Objects and select New.
- In the New GPO dialog box, enter a name for the GPO (e.g., ADSSP_LoginAgent_Button_Disable).
- Click OK.
Step 2: Edit the newly created GPO
- Right-click the GPO you just created.
- Select Edit. This will open the Group Policy Management Editor.
- In the Group Policy Management Editor, navigate to Computer Configuration > Preferences > Windows Settings > Registry.
Step 3: Add the registry entry to enable the login bypass
- Right-click Registry on the left pane.
- Navigate to New > Registry Item.
- In the New Registry Properties window, configure the following:
- Action: Update
- Hive: HKEY_LOCAL_MACHINE
- Key Path: SOFTWARE\WOW6432Node\ZOHO Corp\ADSelfService Plus Client Software
- Value name: ShowADSSPTile
- Value type: REG_SZ
- Value data: false
- Base: String (default option)
- Click Apply, then OK.
Step 4: Link the GPO
- Close the editor.
- Link the GPO to the relevant OU or domain.
- Apply the GPO to the target machines by running the following:
gpupdate /force Validation and confirmation
- Once the GPO is deployed, verify if the above settings are deployed by using the command gpresult /r.
- You may also check the registry on the client by navigating to HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ZOHO Corp\ADSelfService Plus Client Software. Ensure the ShowADSSPTile key exists and is set to False.
How to reach support
New to ADSelfService Plus?
Related Articles
Self-service password reset for Windows 7, 8, and 10
We've all had to reset a forgotten password at some point in our lives. But have you ever wondered what goes on behind the scenes when you initiate a password reset? Have you considered the security risks that can arise due to poor password ...Forgot your Mac password? Reset it from the login screen with ADSelfService Plus
f users can't remember their macOS login password, they won't be able to log in to their Active Directory (AD) account either, which negatively affects their productivity. To reset Mac passwords, users can use any of the methods supported by ...Self-service password reset and account unlock for Chromebook devices
The Chromebook is Google's low-cost alternative to traditional laptops. Unlike Windows, macOS, and Linux machines, a Chromebook runs on the Chrome OS. Users can login to their Chromebook using their AD domain credentials, if their device has been ...Zendesk password reset
Zendesk admins can enable users with the capability to reset their own, should they forget them. To reset their passwords, users have to: Open the Zendesk login page. Click Forgot your password in the login screen. Open the email sent by the Zendesk ...How to reset forgotten Windows passwords from the login screen using ADSelfService Plus
Empowering users with a Windows password reset tool According to recent research, organizations are spending close to one million dollars annually on resolving password-related tickets. This isn’t that surprising, as the Microsoft-approved methods to ...