Removing non-enrolled users to save up on license cost
A license will be assigned to every user after successful authentication into ADSelfService Plus regardless of the users' enrollment status. Below are the possible scenarios when a non-enrolled user takes up a license:
1. A user logs into the self-service user portal but decides to complete the enrollment later.
2. Password Policy Enforcer is enabled for native password reset (through ADUC) and change (through Windows login screen) using the password sync agent.
When these users consume the license, other users who have legitimate reasons to access the product for password resets or finishing MFA authentication for endpoint logins may not be able to do so if there are not enough licenses. To prevent this, periodically check the Licensed Users Report and remove the licenses consumed by non-enrolled users.
Steps to revoke licenses consumed by non-enrolled users
- Log into ADSelfService Plus admin console.
- Go to Reports -> Enrollment Reports -> Licensed Users Report.
- Select a Domain and select Not-Enrolled Users from the Filter drop-down.
- Click Generate.
- Once the report is generated, select the users and click Delete.
Fig 1: Revoking license of non-enrolled users in ADSelfService Plus.
Refer to our licensing guide to learn more on how ADSelfService Plus licensing works and how to free up unused licenses.
New to ADSelfService Plus?
Related Articles
Automatically reinstate revoked licenses of users
Licenses are a costly affair. Administrators should know the tips and tricks of easy and cost-effective license management. It is a common practice to revoke the licenses of: Inactive users Locked out users Password expired users, and other users who ...Free up unused ADSelfService Plus licenses
As employees enter and leave an organization, there may be a substantial amount of stale user accounts in Active Directory. Stale accounts should be removed from the purview of ADSelfService Plus so that the license assigned to them can be reclaimed ...How to turn off ADSelfService Plus license expiration notification
To disable ADSelfService Plus license expiration notification, please follow the steps given below: Log in to ADSelfService Plus as a Super Admin. Click the Admin tab in ADSelfService Plus. Go to Product Settings > Mail/SMS Settings. Under the Mail ...ADSelfService Plus valid user identification
The following user categories can be considered valid in ADSelfService Plus licensing. All users who have enrolled with ADSelfService Plus. All non-enrolled users who have logged in to the product, once or more, to enroll or to update their contact ...How to modify a specific authenticator enrolled by a user?
Once the user has enrolled with the enabled authenticators in ADSelfService Plus, they may want to modify the enrollment information. This article explains the multiple methods to modify authenticator enrollment modification. Self-modification of the ...