How to remove not enrolled users to save license costs in ADSelfService Plus
Objective
ADSelfService Plus licenses are assigned to users upon enrollment. However, if users never enroll, their licenses remain occupied unnecessarily.
Below are scenarios where a non-enrolled user may occupy a license:
- A user logs into the self-service portal but delays or skips enrollment.
- Password Policy Enforcer is enabled for native password reset (via ADUC) or change (via Windows login screen) using the Password Sync Agent, which consumes a license even without enrollment.
By removing not enrolled users, you:
- Free up licenses for active users.
- Reduce costs by optimizing license usage.
- Improve compliance by maintaining only valid users in the system.
Prerequisite
- Administrative access to the ADSelfService Plus portal.
Steps to follow
- Log into ADSelfService Plus admin console.
- Go to Reports > Other Reports > Licensed Users Report.
- Select the relevant domain and choose Not-Enrolled Users from the Filter drop-down.
- Click Generate.
- Once the report is generated, select the desired users and click Delete.
Tips
- Regularly audit licensed users to ensure optimal license utilization.
- Communicate enrollment policies to users to prevent incomplete enrollments.
How to reach support
New to ADSelfService Plus?
Related Articles
Removing non-enrolled users to save up on license cost
A license will be assigned to every user after successful authentication into ADSelfService Plus regardless of the users' enrollment status. Below are the possible scenarios when a non-enrolled user takes up a license: 1. A user logs into the ...How to enable Partial Enrollment for Active Directory users in ADSelfService Plus
Active Directory domain users need to complete enrollment with ADSelfService Plus before they can use the below listed features: Self-service password reset Self-service account unlock Endpoint multi-factor authentication ADSelfService Plus' logon ...ADSelfService Plus valid user identification
The following user categories can be considered valid in ADSelfService Plus licensing. All users who have enrolled with ADSelfService Plus. All non-enrolled users who have logged in to the product, once or more, to enroll or to update their contact ...How to remove stale licenses from ADSelfService Plus
The existing ADSelfService Plus license count can often be exhausted by non-enrolled, and stale account including inactive, account disabled, account expired, and deleted users. You can restrict these users from accessing ADSelfService Plus and in ...Multi-factor authentication techniques in ADSelfService Plus
Let's take a look into the various authentication methods supported by ADSelfService Plus for enterprise multi-factor authentication (MFA). Why should you use MFA? Authentication based solely on usernames and passwords is no longer considered secure. ...