ADSelfService Plus - Firewall Rule
We have a firewall between our domain controllers and the ADSelfService Plus server. Initially, we found that it was taking about 3 minutes to reset a password. Reviewing our firewall logs, we found that TCP port 464 (Kerberos Change/Set password) needed to be opened. After the firewall was updated to allow this communcation, the password reset feature began working as expected. As more organizations place firewalls within their internal environment, I expect others will see this happen.