Removing non-enrolled users to save up on license cost
A license will be assigned to every user after successful authentication into ADSelfService Plus regardless of the users' enrollment status. Below are the possible scenarios when a non-enrolled user takes up a license:
1. A user logs into the self-service user portal but decides to complete the enrollment later.
2. Password Policy Enforcer is enabled for native password reset (through ADUC) and change (through Windows login screen) using the password sync agent.
When these users consume the license, other users who have legitimate reasons to access the product for password resets or finishing MFA authentication for endpoint logins may not be able to do so if there are not enough licenses. To prevent this, periodically check the Licensed Users Report and remove the licenses consumed by non-enrolled users.
Steps to revoke licenses consumed by non-enrolled users
- Log into ADSelfService Plus admin console.
- Go to Reports -> Enrollment Reports -> Licensed Users Report.
- Select a Domain and select Not-Enrolled Users from the Filter drop-down.
- Click Generate.
- Once the report is generated, select the users and click Delete.
Fig 1: Revoking license of non-enrolled users in ADSelfService Plus.
Refer to our licensing guide to learn more on how ADSelfService Plus licensing works and how to free up unused licenses.
New to ADSelfService Plus?
Related Articles
Automatically reinstate revoked licenses of users
Licenses are a costly affair. Administrators should know the tips and tricks of easy and cost-effective license management. It is a common practice to revoke the licenses of: Inactive users Locked out users Password expired users, and other users who ...Free up unused ADSelfService Plus licenses
As employees enter and leave an organization, there may be a substantial amount of stale user accounts in Active Directory. Stale accounts should be removed from the purview of ADSelfService Plus so that the license assigned to them can be reclaimed ...How to turn off ADSelfService Plus license expiration notification
To disable ADSelfService Plus license expiration notification, please follow the steps given below: Log in to ADSelfService Plus as a Super Admin. Click the Admin tab in ADSelfService Plus. Go to Product Settings > Mail/SMS Settings. Under the Mail ...How to remove stale licenses from ADSelfService Plus
The existing ADSelfService Plus license count can often be exhausted by non-enrolled, and stale account including inactive, account disabled, account expired, and deleted users. You can restrict these users from accessing ADSelfService Plus and in ...How to enable Partial Enrollment for Active Directory users in ADSelfService Plus
Active Directory domain users need to complete enrollment with ADSelfService Plus before they can use the below listed features: Self-service password reset Self-service account unlock Endpoint multi-factor authentication ADSelfService Plus' logon ...