Active Directory password and account reports

This report shows the list of users who have been locked out. It allows administrators to view the list of locked accounts and run a scheduler to regularly check for and automatically unlock them. Alternatively, enrolled users can manually unlock their account through ADSelfService Plus's web portal, logon screen, or mobile application.

Taking proactive steps to notify users of their password expiration date will greatly reduce domain account lockout. ADSelfService Plus generates a soon-to-expire password users report listing the users whose passwords will expire after a specific number of days (as set in the password policy of your Active Directory). The report on users whose passwords will expire can be manually or automatically generated at a specific time of the day. ADSelfService Plus notifies all domain users by email, SMS, and/or push notification about their impending password expiration and recommends that the users reset their domain login password from ADSelfService Plus's self-service portal.

This report provides a list of all users who have expired passwords, the current password, the time of password expiration, and their last log on time. The report can also be customized to include attributes such as the last time the user entered a wrong password, the wrong password count, and more by clicking the Add/Remove Columns button. Administrators can schedule the password expired users report and have it sent to specific email addresses.

Administrators can also set up a scheduler to check for password expired users and automatically reset passwords to a default value as determined by the administrator. Alternatively, enrolled users can manually reset their password through ADSelfService Plus's web portal, logon screen, or mobile application. Administrators can also configure the product to send out notifications to users' alternate email or mobile when their passwords have expired.

This report audits the Active Directory users and lists those who have reset their login password using ADSelfService Plus. You can view information such as the time of password reset and the machine and IP address from where the reset action was performed. It also displays the mode of password reset (via GINA, web portal, mobile application, or agent), which allows administrators to analyze the most sought after method to reset passwords.

This report provides a list of users who have unlocked their domain account using ADSelfService Plus. You can also view information on the time of account unlock, the machine used to unlock the account, the IP address of the machine used, and more, allowing administrators to analyze your users' account unlock practices.

This report audits the users who employed ADSelfService Plus' self-update feature to update their attributes in Active Directory during a specified time period and lists them out. You can also view information on the time of self-update, IP address of the machine used, number of attempts made, and the status of the self-update operation. Additionally, a filter can be applied to view only the successful or failed operations.

This report lists the Active Directory users who have used ADSelfService Plus to change their login password. This report also shows how users changed their passwords (via the login screens of Windows, macOS and Linux machines, web portals, or mobile applications), which allows administrators to analyze the most sought after method to change passwords.

This report focuses on the delivery status of various ADSelfService Plus notifications. It provides information on the delivery status of enrollment notifications, account or password expiration notifications, password expired notifications, and notifications sent out on execution of self-service operations.

This report provides the number of unsuccessful attempts made by end users while undertaking the identity verification procedures. View this report for the default time period or a custom duration. It also lets you view all users who have been blocked due to repeated identity verification failures within a fixed duration and allows administrators to unblock them from the same screen.

This audit report provides the number of attempts made by an end user to log on to the self-service portal, the date and time of the log on attempts, the status of the log on attempts, and the machine and IP address from which the attempts originated. This report would be useful in  determining why the user's account was locked out.

#1 Enrolled Users Report

This report provides a list of all users enrolled with ADSelfService Plus. Additionally, administrators can unenroll users directly from the report in a single click.

#2 Non-Enrolled Users Report

This report highlights the list of users who have yet to enroll with the ADSelfService Plus application.

This report lists the users who are currently using up ADSelfService Plus's licenses. The information provided by this report is helpful for effective license management.

It also provides administrators with the option of restricting users who are no longer in need of the license. This process is accomplished by generating the "Unowned Licenses" report and deleting their licenses with the help "Restrict Users" of the feature. This operation can be done manually or scheduled to run at fixed intervals.

This report generates the list of enrolled users along with their respective security questions and answers. The information provided by these reports assists help desk officials.

This report shows the list of mobile devices that are registered for push notifications. It allows administrators to filter and display either Android devices or iPhones. The administrator can also remove registered devices directly from the reports.