Setting limits for password reset and account unlock actions
ADSelfService Plus now allows you to set a limit for the number of self-password resets and account unlocks users can perform in a given number of days. For example, you can limit the password resets to a maximum of 5 times a month for a user. To do this,
- Go to Policy Configuration under the Configuration tab.
- Click Advanced Settings of a self-service policy.
- Go to Block User tab.
- Select Allow users to reset password only 'x' times in 'x' days option. Enter the number of attempts and number of days as required.
- Select Allow users to unlock account only 'x' times in 'x' days option. Enter the number of attempts and number of days as required.
- Click OK.
This setting along with Enforce Password History settings will ensure that users can't exploit self-password reset to revert to their old password.
New to ADSelfService Plus?
Related Articles
ADSelfService Plus self-service password reset configuration: Reset & Unlock tab
Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...Self-service password reset for Windows 7, 8, and 10
We've all had to reset a forgotten password at some point in our lives. But have you ever wondered what goes on behind the scenes when you initiate a password reset? Have you considered the security risks that can arise due to poor password ...Self-service password reset and account unlock for Chromebook devices
The Chromebook is Google's low-cost alternative to traditional laptops. Unlike Windows, macOS, and Linux machines, a Chromebook runs on the Chrome OS. Users can login to their Chromebook using their AD domain credentials, if their device has been ...Configuring the ADSelfService Plus login agent for machine MFA and password self-service in Linux
Securing data and resources on the corporate network is of paramount importance to organizations. In a world where most corporate attacks originate at an endpoint, ADSelfService Plus offers 20 MFA factors to protect endpoints by allowing access only ...Verify users' identities using SAML-based identity providers during self-service password reset and account unlock
Among the extensive range of MFA options supported by ADSelfService Plus, SAML authentication is one of the available methods. Verification of user's identity is done using SAML-based identity providers like OneLogin or Okta. When SAML authentication ...