Objective
ADSelfService Plus licenses are assigned to users upon enrollment. However, if users never enroll, their licenses remain occupied unnecessarily.
Below are scenarios where a non-enrolled user may occupy a license:
A user logs into the self-service portal but delays or skips enrollment.
Password Policy Enforcer is enabled for native password reset (via ADUC) or change (via Windows login screen) using the Password Sync Agent, which consumes a license even without enrollment.
By removing not enrolled users, you:
Free up licenses for active users.
Reduce costs by optimizing license usage.
Improve compliance by maintaining only valid users in the system.
Prerequisite
Steps to follow
Log into ADSelfService Plus admin console.
Go to Reports > Other Reports > Licensed Users Report.
Select the relevant domain and choose Not-Enrolled Users from the Filter drop-down.
Click Generate.
Once the report is generated, select the desired users and click Delete.
Tips
How to reach support
If the issue persists, contact our support team here.