Setting limits for password reset and account unlock actions

Setting limits for password reset and account unlock actions

ADSelfService Plus now allows you to set a limit for the number of self-password resets and account unlocks users can perform in a given number of days. For example, you can limit the password resets to a maximum of 5 times a month for a user. To do this,

  • Go to Policy Configuration under the Configuration tab.
  • Click Advanced Settings of a self-service policy.
  • Go to Block User tab.
  • Select Allow users to reset password only 'x' times in 'x' days option. Enter the number of attempts and number of days as required.
  • Select Allow users to unlock account only 'x' times in 'x' days option. Enter the number of attempts and number of days as required.
  • Click OK. 

This setting along with Enforce Password History settings will ensure that users can't exploit self-password reset to revert to their old password.


                  New to ADSelfService Plus?

                    • Related Articles

                    • ADSelfService Plus self-service password reset configuration: Part 1

                      Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...
                    • Self-service password reset for Windows 7, 8, and 10

                      We've all had to reset a forgotten password at some point in our lives. But have you ever wondered what goes on behind the scenes when you initiate a password reset? Have you considered the security risks that can arise due to poor password ...
                    • Self-service password reset and account unlock for Chromebook devices

                      The Chromebook is Google's low-cost alternative to traditional laptops. Unlike Windows, macOS, and Linux machines, a Chromebook runs on the Chrome OS. Users can login to their Chromebook using their AD domain credentials, if their device has been ...
                    • Configuring the ADSelfService Plus login agent for machine MFA and password self-service in Linux

                      Securing data and resources on the corporate network is of paramount importance to organizations. In a world where most corporate attacks originate at an endpoint, ADSelfService Plus offers 20 MFA factors to protect endpoints by allowing access only ...
                    • Microsoft 365 password reset

                      The Self-Service Password Reset (SSPR) feature in Azure AD allows users to reset their passwords without going through the help desk. However, changes to users' Azure AD passwords are only synchronized with their on-premises domain accounts when ...