Did You Know - Advanced Policy Configuration Part V
This week let me take you through the various advanced settings available under the Automation tab. This tab contains options which will allow you to automate password reset, account unlock and DC update.
Automation Tab
Automatic Reset & Unlock
The first option – Automatic Reset & Unlock – aids in the creation of password reset/account unlock scheduler, which will automatically reset the expired passwords and unlock the locked accounts of end users.
Steps to configure a password reset scheduler
-
Log in to ADSelfService Plus and click the configuration tab.
-
In the Policy configuration page, click the Advanced button.
-
Click the Automation tab in the new window that opens up.
-
Enable " Automatically resets domain users' passwords when they expire " checkbox.
-
Set the frequency for the scheduler. The available options are daily, weekly, monthly and hourly.
-
Select the method in which the new password has to be generated using the options in 'Reset Password to' setting.
-
Click OK to save the settings.
Note:
-
The new password can either be a custom text of your choice or an automatically generated password based on the password policy.
-
The new passwords will be sent via email/SMS to end users.
This setting, when configured , will save users the trouble of remembering their impending password reset dates.
Steps to configure an account unlock scheduler
-
Log in to ADSelfService Plus and click the Configuration tab.
-
In the Policy configuration page, click the Advanced button.
-
Click Automation tab in the new window that opens up.
-
Enable “Automatically unlocks locked down accounts in your domain” checkbox.
-
Set the frequency for the scheduler. The available options are daily, weekly, monthly and hourly.
-
Click OK to save the settings
Note:
The users will be communicated about their accounts being unlocked via email/SMS.
DC Updater
The second option – DC Updater – is used when the user is confronted with a replication problem. The DC Updater, in the event of a replication delay, will automatically update the current password and account status of the user on all domain controller machines.