Policy Configuration for Self-Service Features

As an admin, ADSelfService Plus enables you to empower users with these password self-service features:

1. Self-service password reset.
2. Self-service account unlock.
3. Self-directory update.
4. Change passwords.
Note:
• ADSelfService Plus allows you to define any number of "self-service policies" in a given domain.
• In case of OU duplication in the policies, First prioritized policy would be treated as users’ assigned policy.

Configuring ADSelfService Plus features based on OUs and groups

You can configure multiple self-service policies based on users’ domains, OUs, and group memberships, and decide which set of users have access to what ADSelfService Plus features.

How to configure self-service policies:

1. Navigate to the Configuration tab.
2. Click on the  Add New Policy  button on the bottom-right of the webpage.
Note : By default, when ADSelfService Plus discovers domains, it sets up one policy for every domain that it discovers. If that fits your requirements, you can retain it; otherwise, you can edit it.

3. Enter an appropriate  Policy Name .
4. From the list of self-service features provided, select features for your user base. You need to select at least one self-service feature.
5. Click on the  Select OU(s)/Groups button.
6. Select the  domain  on which the policy is to be applied. Here, you have a choice; you can either apply the policy to all users in the selected domain, or only to specific users based on their OU or Group membership.
7. Click  OK .
8. Click  Save Policy .

How to manage self-service policies:

Following action can be performed on the policies :

• Updation : A policy can be edited to reconfigure its features and OU(s) Groups by clicking edit icon ( ).
• Deletion : A policy can be deleted completely by clicking delete icon ( ). But policy cannot be deleted , when there is only one policy for a configured domain or any users fall under this policy has enrolled for Multi-factor authenticators.
• Copy a policy : A policy can be duplicated to configure new policy with some modification by clicking copy icon ( ). This new policy can be applied across other domains, OUs, etc.
• Prioritization : Policy can be reordered to set priority which will get precedence when user falls under more than one policy. Reorder can be done by clicking reorder icon right next to Add New Policy
  
  
Note : Changes made to the policy can be audited using the Last Modified By and Last Modified Time columns present in the Available Policies table.