The existing ADSelfService Plus license count can often be exhausted by non-enrolled, and stale account including inactive, account disabled, account expired, and deleted users. You can restrict these users from accessing ADSelfService Plus and in turn free up licenses by following these steps.
Note: Please stop the service and take a database backup before proceeding.
Select the users using checkbox and click Delete button to remove non-enrolled users.
Go to Admin > License Management > Restrict Users.
In the Restricted Users section, click Restrict Users.
The Restrict Users section will open. Specify the domain using the Select Domain drop-down menu. You can also use the OUs option to select Organization Units.
Select the stale user account type using the Account Type drop-down menu. In the case of Inactive Users and Deleted Users, select the number of days for which the user accounts have been inactive or deleted respectively.
Click Generate.
A list of stale Active Directory user accounts is generated.
From this list, select the accounts you want to restrict. You can select individual accounts or select all the accounts at once.
Click Restrict
Go to Admin > License Management > Restrict Users.
Click Schedule to Restrict/Unrestrict. The Schedule to Restrict/Unrestrict section will appear
Select the Restrict tab and click Add New Scheduler.
Enter a Scheduler Name.
Select the domain using the Select Domain field and use the OUs option to select the desired Organizational Units.
In the Select Account Type section, specify the type of stale user accounts that you want to restrict.
In the Select Duration section, specify the frequency of the scheduler.
Use the Notify Admin option to select an email ID to which the restricted users list will be sent periodically.
Click Save.