What are Self-Service Policies?
The self-service policies in ADSelfService Plus govern what self-service features users can avail. These policies have advanced settings w hich can be configured to apply restrictions on how users use the self-service features .
Group and OU-based Configuration
It is highly likely that not all users in a domain would require similar self-service permissions and restrictions. Keeping it in mind, ADSelfService Plus has an option to configure OU and group-based self-service policies. You can apply self-service policies to a domain or a group or even an OU.
For example, you can choose to give users in the managers OU access to all the features with few restrictions. Other users can have access to only self-password reset and self-account unlock with a strict c ustom password policy.
Prioritize Self-Service Policies
You can prioritize self-service policies so that if a group or an OU falls under multiple self-service policies, the self-service policy with the highest priority will take effect.
We will see more about the settings available in the Advanced Policy Configuration next week.