Pricing  Get Quote
 
 

Unlock

Self-service account unlock tool for Active Directory and cloud applications

Start free trial

AD account lockout tool

It is a common practice for admins to enforce timely password changes and stringent password policies to ensure organizational network security. However, these security measures can adversely affect productivity when users forget their login passwords, causing frequent AD account lockouts.

ADSelfService Plus, an identity security solution with MFA, SSO, and password management capabilities, provides a self-service account unlock tool that allows local and remote users to unlock AD accounts and other cloud accounts without help desk assistance.

Around the clock self-service options for locked-out user accounts

ADSelfService Plus enables users to unlock their Microsoft, Google Workspace, or AD accounts from any location!

  •  

    Account unlock from login screens

    Allow users to unlock accounts from their Windows, macOS, and Linux login screens.Learn more

  •  

    Account unlock from mobile devices

    Empower users to unlock their accounts from their Android and iOS devices. Learn more

  •  

    Account unlock from a private network

    Grant users the ability to update their local cached credentials after unlocking their AD accounts remotely. Learn more

  •  

    Account unlock from web browsers

    Enable users to unlock their AD and cloud accounts securely using ADSelfService Plus' web browser.

Stringent MFA techniques to secure self-service account unlocks

ADSelfService Plus allows admins to trigger a preconfigured authentication workflow once users initiate an account unlock. It comprises 20 different authentication techniques, including FIDO passkeys, biometrics, and YubiKey, which can be utilized to authenticate users during self-service account unlocks. ADSelfService Plus ensures the protection of confidential data by allowing admins to enforce different types of authentication techniques for different users based on their level of access to sensitive business data.

The following are some MFA methods that ADSelfService Plus supports to authenticate user identities:

Supported authenticators for self-service account unlock

The following are some MFA methods that ADSelfService Plus supports to authenticate user identities during account unlock:

For the complete list of supported authenticators, click here.

  •  

    FIDO passkeys

  •  

    Biometric authentication

  •  

    YubiKey Authenticator

  •  

    Duo Security

  •  

    Google Authenticator

  •  

    TOTPs

Conditional access policies for enhanced security

The conditional access policies offered by ADSelfService Plus enable admins to configure context-based rules to step-up or step-down the authentication flow for self-service account unlock. These authentication factors can be altered based on various factors, such as the IP address, time of request, device used, and the geolocation of the user. In a scenario where an account unlock request is received from an untrusted IP address, the user can be asked to complete additional factors of identity verification, with biometrics being a mandatory verification factor.

Supported platforms for self-service account unlock

ADSelfService Plus supports the following user directories for self-service account unlock.

  • AD
  • OpenLDAP
  • AD Lightweight Directory Services (LDS)
  • Google Workspace
  • Microsoft SQL Server
  • Salesforce
  • Microsoft 365
  • IBM AS400
  • HP-UX
  • Oracle Database

Types of account unlock requests IT admins receive from end users

  • My Active Directory account is locked. How do I unlock it?
  • I have been locked out of my laptop because of a forgotten password.
  • I am unable to access my work account.
  • How do I unlock my AD account?
  • How do I unlock my locked Active Directory account?
  • My AD account keeps locking me out because of forgotten passwords.
  • Can I unlock my own AD account?
  • What to do if I've locked myself out of my laptop?
  • What to do if I cannot unlock my laptop?
  • How do I reset my laptop if I'm locked out?

ADSelfService Plus empowers your end users to unlock their own accounts right from their login screens, freeing IT admins from these routine account unlock queries.

How much money can you save using a password reset and account unlock tool?

Calculate your ROI here

Ensure 100% user enrollment for self-service account unlock

ADSelfService Plus requires users to complete MFA enrollment before they can use the account unlock tool. To ensure 100% user enrollment, ADSelfService Plus enables IT admins to:

  • Invite users to enroll in MFA via email and push notifications.
  • Force users to enroll when they log in to their machines with a persistent pop-up dialogue box.
  • Utilize users' existing AD information for enrollment.
  • Automatically enroll users by importing necessary enrollment data from an external database or using CSV files.

Learn more about enrollment

Benefits of self-service account unlock using ADSelfService Plus

  •  

    Improved user productivity:

    Users no longer have to depend on the help desk's availability to unlock their locked out accounts. This means both users and IT admins don't lose their productivity because of account lockouts.

  •  

    Reduced help desk workload

    Lighten the burden for IT admins by enabling users to unlock their own locked out account at any time of day.

  •  

    Increased ROI

    ADSelfService Plus delivers benefits on the day it's installed by resolving workforce downtime issues and reducing incurred IT costs due to account lockouts.

  •  

    Simplified tracking

    Monitor the status of users' account lockouts with the help of detailed reports. Moreover, ADSelfService Plus makes collecting data for legal auditing easy.

Unlock AD accounts without help desk
assistance using ADSelfService Plus

Get your free trial 

ADSelfService Plus also supports

  •  

    Adaptive MFA

    Enable context-based MFA with 19 different authentication factors for endpoint and application logins.

    Learn more  
  •  

    Enterprise single sign-on

    Allow users to access all enterprise applications with a single, secure authentication flow.

    Learn more  
  •  

    Remote work enablement

    Enhance remote work with cached credential updates, secure logins, and mobile password management.

    Learn more  
  •  

    Powerful integrations

    Establish an efficient and secure IT environment through integration with SIEM, ITSM, and IAM tools.

    Learn more  
  •  

    Enterprise self-service

    Delegate profile updates and group subscriptions to end users and monitor these self-service actions with approval workflows.

    Learn more  
  •  

    Zero Trust

    Create a Zero Trust environment with advanced identity verification techniques and render your networks impenetrable to threats.

    Learn more  

 

ADSelfService Plus trusted by