How to enable admin or manager notifications for failed password resets, account unlocks, and password changes in ADSelfService Plus
Objective
This article explains how to configure email notifications in ADSelfService Plus to inform administrators or managers when users fail to complete a password reset, account unlock, or password change. This notification helps IT administrators monitor unsuccessful self-service activities, detect potential misuse, or identify misconfigurations.
Prerequisites
Steps to enable admin or manager notifications for failed self-service actions
Log in to the ADSelfService Plus admin console
Navigate to Configuration > Self-Service > Policy Configuration.
Click the Advanced icon next to the policy that includes the users whose failed self-service actions should trigger notifications to be sent to the admins or managers.
Navigate to the Notification tab.
Click Notify Admin/Manager in the bottom-left pane.
Check the box labeled Notify admin/manager of failed user action(s).
Select the desired failed actions to monitor, such as Reset Password, Unlock Account, and Change Password.
Enter one or more admin or manager email addresses in the Email ID field.
Optionally, customize the subject and message content.
Click OK, then confirm by clicking Yes in the dialog box to apply the changes to all users associated with the policy.
Validation and confirmation
To confirm that notifications are working as expected:
Attempt a failed password reset or account unlock from a user account that falls under the configured policy.
Confirm the configured admin or manager email address receives a notification regarding the failed action.
Tips
Use macros like %sAMAccountName%, %actionPhrase%, and %dateTime% in the message template to personalize messages with relevant user and action details.
You can also configure notifications to be sent to admins or managers when users are blocked after multiple failed identity verification attempts. This helps alert administrators about potential account takeover attempts or suspicious activity.
For greater control over self-service actions, consider integrating ADSelfService Plus with ManageEngine ServiceDesk Plus or ServiceDesk Plus Cloud. This integration allows self-service requests such as password resets or account unlocks to require approval from admins or managers before being executed.
How to reach support
If the issue persists, contact our support team here.
New to ADSelfService Plus?
Related Articles
How to enable user notifications for password resets, account unlocks, and password changes in ADSelfService Plus
Objective This article explains how to configure email, SMS, and push notifications in ADSelfService Plus to alert users whenever a password reset, account unlock, or password change is performed. ADSelfService Plus' notification feature enhances ...
How to prevent a brute force attack with ADSelfService Plus
What is a brute force attack? In a brute force attack, cybercriminals try to guess the password of a target user account, analyze the result, and try again until they succeed. This process could take anywhere from weeks to months. Though this method ...
Change the default ADSelfService Plus admin password to improve security
Description By default, ADSelfService Plus has default admin account. This account has all the privileges and access to the ADSelfService Plus admin console. The default admin account uses the word admin as the username and the password. It is highly ...
Google Workspace password reset
G Suite admins can enable users to reset their passwords and recover their accounts without admin support. ADSelfService Plus, an Active Directory (AD) self-service password management and single sign-on solution, offers the Password Reset feature, ...
Multi-factor authentication techniques in ADSelfService Plus
Let's take a look into the various authentication methods supported by ADSelfService Plus for enterprise multi-factor authentication (MFA). Why should you use MFA? Authentication based solely on usernames and passwords is no longer considered secure. ...