How to remove stale licenses from ADSelfService Plus
The existing ADSelfService Plus license count can often be exhausted by non-enrolled, and stale account including inactive, account disabled, account expired, and deleted users. You can restrict these users from accessing ADSelfService Plus and in turn free up licenses by following these steps.
Note: Please stop the service and take a database backup before proceeding.
Steps to remove non-enrolled licenses
- Click Reports > Enrollment Report > Licensed User Report.
- Generate the report; select Not-Enrolled Users from Filter drop-down.
Select the users using checkbox and click Delete button to remove non-enrolled users.
Steps to remove invalid users
A. Manual restriction
Go to Admin > License Management > Restrict Users.
In the Restricted Users section, click Restrict Users.
The Restrict Users section will open. Specify the domain using the Select Domain drop-down menu. You can also use the OUs option to select Organization Units.
Select the stale user account type using the Account Type drop-down menu. In the case of Inactive Users and Deleted Users, select the number of days for which the user accounts have been inactive or deleted respectively.
Click Generate.
A list of stale Active Directory user accounts is generated.
From this list, select the accounts you want to restrict. You can select individual accounts or select all the accounts at once.
Click Restrict
B. Scheduled automatic restriction
Go to Admin > License Management > Restrict Users.
Click Schedule to Restrict/Unrestrict. The Schedule to Restrict/Unrestrict section will appear
Select the Restrict tab and click Add New Scheduler.
Enter a Scheduler Name.
Select the domain using the Select Domain field and use the OUs option to select the desired Organizational Units.
In the Select Account Type section, specify the type of stale user accounts that you want to restrict.
In the Select Duration section, specify the frequency of the scheduler.
Use the Notify Admin option to select an email ID to which the restricted users list will be sent periodically.
Click Save.
New to ADSelfService Plus?
Related Articles
Free up unused ADSelfService Plus licenses
As employees enter and leave an organization, there may be a substantial amount of stale user accounts in Active Directory. Stale accounts should be removed from the purview of ADSelfService Plus so that the license assigned to them can be reclaimed ...Troubleshooting Guide for Common Errors in ADSelfService Plus End User Portal
Permission denied. Please contact your administrator. Cause: There are two reasons why this error could occur: End users trying to access any of the self-service features in ADSelfService Plus such as password reset or directory self-update need to ...ADSelfService Plus valid user identification
The following user categories can be considered valid in ADSelfService Plus licensing. All users who have enrolled with ADSelfService Plus. All non-enrolled users who have logged in to the product, once or more, to enroll or to update their contact ...ADSelfService Plus product startup issues
What do you need to know before troubleshooting You need to have administrator access to ADSelfService Plus. When you experience an error with ADSelfService Plus, check if these prerequisites are satisfied: Install ADSelfService Plus as a service ...Automatically reinstate revoked licenses of users
Licenses are a costly affair. Administrators should know the tips and tricks of easy and cost-effective license management. It is a common practice to revoke the licenses of: Inactive users Locked out users Password expired users, and other users who ...