How to reset forgotten Windows passwords from the login screen using ADSelfService Plus
Empowering users with a Windows password reset tool
According to recent research, organizations are spending close to one million dollars annually on resolving password-related tickets. This isn’t that surprising, as the Microsoft-approved methods to reset forgotten Windows passwords come with prerequisites like creating a password reset disk or having a Microsoft email account.
ADSelfService Plus allows users to easily reset Windows Active Directory (AD) domain passwords, including on Windows 10, after proving their identity through any of the supported authentication techniques.
Supports: Windows 11, 10, 8, 7, XP, and Vista | Windows Server 2008 and above
Self-service password reset for Windows: How does it work?
- ADSelfService Plus places a Reset Password/Account Unlock link (logon agent) on the login screen of Windows machines.
- Clicking this link will open the password reset portal. Users are required to prove their identity through any of the enforced authentication methods, like SMS-based one-time passwords (OTPs), email-based OTPs, Google Authenticator, DUO Security and RSA SecurID.
Note:
- Users must be enrolled in ADSelfService Plus to utilize the self-service password reset and self-service account unlock capabilities.
- Enrollment is a one-time process where users enter their mobile number and email address, set answers to security questions, and provide other details in ADSelfService Plus in order to register for self-service password management. Learn how to enroll users.
- Once a user’s identity is successfully verified, they will be allowed to reset their Windows AD domain password.
Tip: Ensure password security. Use the Password Policy Enforcer to enforce strong user passwords by including special characters and blacklisting dictionary words and patterns.
Installing the ADSelfService Plus logon agent on users' machines
Before users can reset passwords from their Windows login screen, admins have to deploy the logon agent on users’ machines in the following ways:
From the ADSelfService Plus admin console
- Download and install ADSelfService Plus.
- Navigate to the Configuration tab → Administrative Tools → GINA/Mac/Linux.
- Click GINA/Mac/Linux InstallationIn the New Installations section, choose the required Domain from the drop-down.
- Click Add OUs to select the OUs for which the logon agent can be installed. Click Get Computers.
- Click Add OUs to select the OUs for which the logon agent can be installed. Click Get Computers.
- Now, select the computers to which the logon agent needs to be pushed.
- Click Install.
Installation via GPO
Installation via SCCM
Manual installation
- Paste the MSI package (Location: C:\Program Files\ManageEngine\ADSelfService Plus\bin) in the client machine.
- Begin the Client Software Setup Wizard and complete the required steps.
New to ADSelfService Plus?
Related Articles
How to reset passwords in Linux OS with ADSelfService Plus
IT admins are equipped to deal with much more than simple password reset calls from frustrated employees. However, when there's a huge spike in calls to unlock user accounts or reset passwords, the admin productivity is hindered and they're forced to ...Sequential ADSelfService Plus Windows agent login installation process
This article highlights the process sequence for the ADSelfService Plus Windows login agent installation via the admin portal and the prerequisites to be addressed to successfully complete each step. Additionally, we're also discussing some common ...Forgot your Mac password? Reset it from the login screen with ADSelfService Plus
f users can't remember their macOS login password, they won't be able to log in to their Active Directory (AD) account either, which negatively affects their productivity. To reset Mac passwords, users can use any of the methods supported by ...Installing the ADSelfService Plus login agent through WMI or PAExec services instead of RemCom
The Windows login agent that comes bundled with ADSelfService Plus must be installed on users' machines to enable: Self-service password reset and account unlock options from the Windows login screen. MFA during machine login. Cached credentials ...Configuring the ADSelfService Plus login agent for machine MFA and password self-service in Linux
Securing data and resources on the corporate network is of paramount importance to organizations. In a world where most corporate attacks originate at an endpoint, ADSelfService Plus offers 20 MFA factors to protect endpoints by allowing access only ...