Removing non-enrolled users to save up on license cost
A license will be assigned to every user after successful authentication into ADSelfService Plus regardless of the users' enrollment status. Below are the possible scenarios when a non-enrolled user takes up a license:
1. A user logs into the self-service user portal but decides to complete the enrollment later.
2. Password Policy Enforcer is enabled for native password reset (through ADUC) and change (through Windows login screen) using the password sync agent.
When these users consume the license, other users who have legitimate reasons to access the product for password resets or finishing MFA authentication for endpoint logins may not be able to do so if there are not enough licenses. To prevent this, periodically check the Licensed Users Report and remove the licenses consumed by non-enrolled users.
Steps to revoke licenses consumed by non-enrolled users
- Log into ADSelfService Plus admin console.
- Go to Reports -> Enrollment Reports -> Licensed Users Report.
- Select a Domain and select Not-Enrolled Users from the Filter drop-down.
- Click Generate.
- Once the report is generated, select the users and click Delete.
Fig 1: Revoking license of non-enrolled users in ADSelfService Plus.
Refer to our licensing guide to learn more on how ADSelfService Plus licensing works and how to free up unused licenses.
New to ADSelfService Plus?
Related Articles
How to remove not enrolled users to save license costs in ADSelfService Plus
Objective ADSelfService Plus licenses are assigned to users upon enrollment. However, if users never enroll, their licenses remain occupied unnecessarily. Below are scenarios where a non-enrolled user may occupy a license: A user logs into the ...How to turn off ADSelfService Plus license expiration notification
To disable ADSelfService Plus license expiration notification, please follow the steps given below: Log in to ADSelfService Plus as a Super Admin. Click the Admin tab in ADSelfService Plus. Go to Product Settings > Mail/SMS Settings. Under the Mail ...Error: Your account is not enrolled for multi-factor authentication. Please enroll to avail the service
Issue description Users may encounter the error message "Your account is not enrolled for multi-factor authentication. Please enroll to avail the service" when trying to log in to ADSelfService Plus. Possible cause MFA is enabled for ADSelfService ...ADSelfService Plus valid user identification
The following user categories can be considered valid in ADSelfService Plus licensing. All users who have enrolled with ADSelfService Plus. All non-enrolled users who have logged in to the product, once or more, to enroll or to update their contact ...How to automatically reinstate revoked licenses of users
Objective This article explains how to automatically reinstate user licenses that were previously revoked in ADSelfService Plus. Administrators often revoke licenses for users who are inactive, locked out, or have not logged in for an extended ...