How to free up unused ADSelfService Plus licenses

How to free up unused ADSelfService Plus licenses

Objective 

As employees enter and leave an organization, stale user accounts may accumulate in Active Directory. Removing these accounts from ADSelfService Plus reclaims their assigned licenses, allowing them to be reassigned to active users.
The Restrict Users feature in ADSelfService Plus helps remove stale accounts manually or automatically. This feature:
  • Frees up licenses assigned to inactive accounts.
  • Restricts future access to ADSelfService Plus for these accounts.
  • Automatically removes enrollment data of restricted users.

Prerequisite 

  • Administrative access to the ADSelfService Plus portal.

Steps to follow 

Manual method

To restrict stale accounts manually:
  1. Go to Admin > License Management > Restrict Users.
  2. Under Restricted Users, click Restrict Users from the right corner of the page.
  3. In the Restrict Users section specify the domain using the Select Domain drop-down menu. Optionally, use the OUs filter to granularly select specific OUs.
  4. Under Account Type, choose the type of stale user accounts to restrict. For Inactive Users and Deleted Users, specify the inactivity or deletion period in days.
  5. Click Generate to fetch a list of matching user accounts
  6. From this list, select the accounts you want to restrict. You can select individual accounts or select all the accounts at once.
  7. Click Restrict to complete the process.

List of supported apps

Automatic method 

To schedule automatic restriction of stale accounts:
  1. Go to Admin > License Management > Restrict Users.
  2. Click Schedule to Restrict/Unrestrict. The Schedule to Restrict/Unrestrict section will appear.
  3. In the Restrict Users tab, click Add New Scheduler.
  4. Provide a Scheduler Name and Description.
  5. Select the domain in the Select Domain field and, if needed, use the OUs option to filter specific OUs.
  6. In the Select Account Type section, choose the type of stale user accounts that you want to restrict.
  7. In the Select Duration section, specify how frequently the scheduler should run.
  8. Use the Notify Admin option to enter an email address to receive regular reports of restricted users.
  9. Click Create to activate the scheduler.

List of supported apps  

By restricting stale user accounts, organizations can reclaim and reuse ADSelfService Plus licenses, improving license utilization and cost efficiency.

Types of accounts that can be restricted

Below are the types of user accounts that can be restricted using the Restrict Users feature:
Account expired: Accounts that have passed their AD expiration date.
Account disabled: Accounts disabled by an administrator.
Inactive users: Accounts that have not logged in to the domain for a specific period of time.
Deleted users: Accounts deleted from AD within the last 90 days.
Smart card users: User accounts that use a smart card for authenticating on their workstations.
Unowned licenses: Licenses consumed by AD user accounts that have been deleted for more than 90 days and whose licenses remain unrevoked.
Service accounts: System accounts used to run services. Resetting the password for a service account will cause the associated service to stop running.

How to reach support                       

If the issue persists, contact our support team here

                  New to ADSelfService Plus?