How to enable admin or manager notifications for failed password resets, account unlocks, and password changes in ADSelfService Plus

How to enable admin or manager notifications for failed password resets, account unlocks, and password changes in ADSelfService Plus

Objective 

This article explains how to configure email notifications in ADSelfService Plus to inform administrators or managers when users fail to complete a password reset, account unlock, or password change. This notification helps IT administrators monitor unsuccessful self-service activities, detect potential misuse, or identify misconfigurations.

Prerequisites 

  • You need administrative privileges in ADSelfService Plus.
  • Ensure the mail server is properly configured in ADSelfService Plus under Admin > Product Settings > Mail Server Settings.

Steps to enable admin or manager notifications for failed self-service actions  

  1. Log in to the ADSelfService Plus admin console
  2. Navigate to Configuration > Self-Service > Policy Configuration.
  3. Click the Advanced icon next to the policy that includes the users whose failed self-service actions should trigger notifications to be sent to the admins or managers.
  4. Navigate to the Notification tab.
  5. Click Notify Admin/Manager in the bottom-left pane.
  6. Check the box labeled Notify admin/manager of failed user action(s).
  7. Select the desired failed actions to monitor, such as Reset Password, Unlock Account, and Change Password.
  8. Enter one or more admin or manager email addresses in the Email ID field.
  9. Optionally, customize the subject and message content.
  10. Click OK, then confirm by clicking Yes in the dialog box to apply the changes to all users associated with the policy.

Validation and confirmation 

To confirm that notifications are working as expected:
  • Attempt a failed password reset or account unlock from a user account that falls under the configured policy.
  • Confirm the configured admin or manager email address receives a notification regarding the failed action.

Tips

  • Use macros like %sAMAccountName%, %actionPhrase%, and %dateTime% in the message template to personalize messages with relevant user and action details.
  • You can also configure notifications to be sent to admins or managers when users are blocked after multiple failed identity verification attempts. This helps alert administrators about potential account takeover attempts or suspicious activity.
  • For greater control over self-service actions, consider integrating ADSelfService Plus with ManageEngine ServiceDesk Plus or ServiceDesk Plus Cloud. This integration allows self-service requests such as password resets or account unlocks to require approval from admins or managers before being executed.

How to reach support             

If the issue persists, contact our support team here.