How to enable auto-generated passwords during self-service resets
Objective
This article explains how to configure ADSelfService Plus to automatically generate secure passwords and deliver them to users via SMS or email after successful identity verification.
This is useful for organizations that prefer centrally generated passwords that meet defined security standards. The generated passwords automatically comply with NIST password guidelines or the Password Policy Enforcer rules (if configured), ensuring strong password quality without requiring users to create their own passwords.
Prerequisites
- Ensure you have default administrator privileges in ADSelfService Plus.
- Ensure email and SMS servers are configured for notification delivery.
Steps to enable auto-generated password delivery
- Log in to the ADSelfService Plus portal using the default administrator account.
- Navigate to Configuration > Self-Service > Policy Configuration.
- Identify the policy for which you want to enable automatic password resets. In the Advanced column, click the button next to the corresponding policy.
- Navigate to the Reset & Unlock tab.
- Enable the SMS/Email auto-generated password to users after identity verification setting.
- Click OK > Yes to apply the changes.
Troubleshooting tips
If the auto-generated passwords are not being sent:
- Verify that the correct policy was edited and saved.
- Confirm that the user is mapped to the updated policy.
- Check that SMS or email notification channels are properly configured under Configuration > Self-Service > Policy Configuration > Advanced button > Notification.
- Ensure the user has a valid mobile number or email address in their Active Directory profile.
- Review the notification logs under Reports > Other Reports > Notification Delivery Report for delivery failures.
How to reach support
New to ADSelfService Plus?
Related Articles
ADSelfService Plus self-service password reset configuration: Reset & Unlock tab
Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...Self-service password reset for Windows 7, 8, and 10
We've all had to reset a forgotten password at some point in our lives. But have you ever wondered what goes on behind the scenes when you initiate a password reset? Have you considered the security risks that can arise due to poor password ...Self-service password reset and account unlock for Chromebook devices
The Chromebook is Google's low-cost alternative to traditional laptops. Unlike Windows, macOS, and Linux machines, a Chromebook runs on the Chrome OS. Users can login to their Chromebook using their AD domain credentials, if their device has been ...Configuring the ADSelfService Plus login agent for machine MFA and password self-service in Linux
Securing data and resources on the corporate network is of paramount importance to organizations. In a world where most corporate attacks originate at an endpoint, ADSelfService Plus offers 20 MFA factors to protect endpoints by allowing access only ...How to disallow palindrome passwords using ADSelfService Plus
Having a secure password is of paramount importance to ensure the safety of your network. A password's strength depends on the length of the password, the different types of characters used, the number of repeated characters, the sequence of ...