✖
 
 

Enrolled Users Report :

The Enrolled Users report provides you with the list of users who have enrolled themselves in ADSelfService Plus. Enrollment provides users with access to the password reset and account unlock portal. It also protects the user accounts through the MFA methods the users have enrolled for. The report displays the users' mail addresses, users' mobile numbers, OU, the time of enrollment and the last time the enrollment was modified of the users.

Report filtering and generation :

  • Domain : Specify the domain using the Select Domain option
  • OU : Use the Add OUs option to specify OUs if necessary.
  • Enrollment status : Use the Enroll Status drop-down to filters the entries based on whether the users are Enrolled or Partially Enrolled. Enrollment status is considered based on below conditions satisfaction. If all the below conditons are satisifed, then user's enrollment treated as Enrolled . If not , Partially enrolled.
    • Condition 1: User should have enrolled for all mandatory authenticators.
    • Condition 2: User should have enrolled for required number of authenticators forced.
    • Condition 3: If Security question is configured as authenticator, then User should have enrolled with all the mandatory questions and number of questions.
  • Enrollment type : Filter the results based on the MFA methods using the Enrollment Type drop-down.
  • Then, click on Generate to generate the report.

Sorting :

Click on any of the columns to view the report's entries in ascending order or descending order.

Searching :

Export and More :

Disenrolling the user

Disenrollment of the user is removing enrollment information completely from the ADSelfService Plus and they will not be able to perform self-service actions. The user must be enrolled again in order to be able to perform the actions. Disenrollment of users' enrollment can be done in two ways :

Customizing the report:

You can customize the report to include or exclude additional columns with information from AD attributes by clicking on the Add/Remove Columns icon at the far left of the navigation buttons.

Generating backup codes

Admins can generate a backup code for an enrolled user when the user's MFA device is not reachable or is lost. The user can use each backup code only once. To generate a backup code for a specific enrolled user:

Generating backup codes

Note:
  • If more than one technician creates backup codes for the same user, then the most recently generated code becomes valid and this code can only be used once.

Copyright © 2022, ZOHO Corp. All Rights Reserved.