How to enable self-service password reset and account unlock for Chromebook users

Objective

This article explains how to enable Chromebook users to reset their Active Directory passwords and unlock their accounts directly from the Chromebook logon screen by integrating Google ChromeOS with ManageEngine ADSelfService Plus.

With this setup, users can securely perform self-service password reset (SSPR) or account unlock without IT intervention, minimizing downtime and help desk calls.

Prerequisites

ADSelfService Plus must be configured with the Active Directory domain that contains the Chromebook user accounts.
The user should have administrative privileges to the Google Admin Console.

Steps to enable self-service actions for Chromebook users

Log in to the Google Admin Console as an administrator.
On the left-hand menu, navigate to Devices > Chrome > Apps & Extensions > Kiosks.
On the Kiosks page, click Add by URL represented by a globe icon on the bottom-right corner.
In the Add by URL window, enter the ADSelfService Plus server URL for password reset/unlock in the URL field. Example: https://demo.adselfserviceplus.com/html/ResetUnlock.html
Replace demo.adselfserviceplus.com with your actual ADSelfService Plus access URL.
Click Save. The window will close, and the entered URL will appear under the Kiosks tab.

Validation and confirmation

Once the configuration is saved, you can verify that the self-service functionality is active and accessible to your users.

Access any Chromebook that is managed by your domain.
On the user logon screen, click Apps in the bottom-left corner.
You should see ADSelfService Plus appear as an option.
Click ADSelfService Plus to launch the Reset Password / Unlock Account wizard. The user can now complete the reset or unlock process using self-service.

How to reach support

If the issue persists, contact our support team here.