Was just wondering.. from what I can tell, Self Update will update either the local DC to the ADSelfServicePlus server or the one with the PDC role, and replication will immediately replicate it to another DC in the same site, from there it takes the usual replication time for the user's update to replicate to other Domain Controllers.

I did however hope that "Site Based DC", which allows you to "Configure the Domain Controllers to be updated on self-service operations." would allow you specify per OU DCs to be updated, now this may mean unlock/password reset functions and not My Info Self Update, but it should clearly state that, unless there's a bug with our Self Service?

I do have Site Based DC configured, however due to a spread of our server systems, I have enabled "DC Updator, Update Reset Password and Account Unlock status on all Domain Controllers" so as to avoid a user being "partially locked out" on one or more systems but not others due to their location. Does this render the "Site Based DC" configuration redundant?

Many thanks.

↧

Text in a button

September 3, 2013, 7:59 am

≫ Next: Re : ADSelfService Plus Build 5020 released !!!

≪ Previous: My Info Self Update Domain Controller

I would like to change the text in button on the attached image. Where do I go to change it?

Thank you

↧

Re : ADSelfService Plus Build 5020 released !!!

September 3, 2013, 3:31 pm

≫ Next: Re : ADSelfService Plus Build 5020 released !!!

≪ Previous: Text in a button

Hi,

I don't see a link to the SP2 patch. Am I missing something?

Thanks,
Tom

↧

Re : ADSelfService Plus Build 5020 released !!!

September 3, 2013, 3:35 pm

≫ Next: AD Self Service on Citrix VDI

≪ Previous: Re : ADSelfService Plus Build 5020 released !!!

Please ignore my previous comment about not seeing the service pack. I needed to refresh the browser that's embedded in the management application and it showed up.

Thanks,

Tom

↧

AD Self Service on Citrix VDI

September 4, 2013, 12:50 am

≫ Next: Re : User gets "Sorry ! You are not authorized to view the contents of this file" when trying to enroll.

≪ Previous: Re : ADSelfService Plus Build 5020 released !!!

Hi

How AD Self Service will work on Citrix VDI environment and GINA support on same.

Regards
Manish Naik

↧

Re : User gets "Sorry ! You are not authorized to view the contents of this file" when trying to enroll.

September 4, 2013, 9:29 am

≫ Next: Re : User gets "Sorry ! You are not authorized to view the contents of this file" when trying to enroll.

≪ Previous: AD Self Service on Citrix VDI

Found the log on my own, but it is not terribly helpful. I swear I saw a toggle for debug log level somewhere, but I can no longer find it. The error:

So, 8007005 is a generic 'access denied' message that could mean any number of things. I CAN get the software to work for newly created accounts, but I can't seem to do so for most of my existing accounts. Please let me know how debug can be enabled so that I can try to find out what it is failing on, as a test account and existing account appear to be almost identical in ADSIEdit, so I can't imagine know what field is it failing on.

↧

Re : User gets "Sorry ! You are not authorized to view the contents of this file" when trying to enroll.

September 9, 2013, 9:38 am

≫ Next: Re : AD Self Service on Citrix VDI

≪ Previous: Re : User gets "Sorry ! You are not authorized to view the contents of this file" when trying to enroll.

To answer my own question:

Create a service account that has the rights to reset+change passwords and to read and write all the properties for User Objects in the domain. If you get hung up on a user object that doesn't work (like I did), go into the user object, security, advanced and make sure that 'disable inheritance' is not enabled (this can happen if user objects are created in an OU that has inheritance disabled).

The 'Domain Settings' in the software will always show that it does not have rights to make the changes. I think all it does it check to see if the account is a member of Domain Admins, and if not it displays the error.

↧

Re : AD Self Service on Citrix VDI

September 9, 2013, 7:30 pm

≫ Next: Re : Text in a button

≪ Previous: Re : User gets "Sorry ! You are not authorized to view the contents of this file" when trying to enroll.

Hi,

Yes, the application supports Citrix VDI.

Regards,

ADSelfService Plus Team.

Direct Tel : +1-408-916-9890.

E-mail : support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : Text in a button

September 9, 2013, 7:34 pm

≫ Next: Re : My Info Self Update Domain Controller

≪ Previous: Re : AD Self Service on Citrix VDI

Hi,

Please follow the steps provided below to customize the text message in ADSelfService Plus.

* Stop ADSelfService Plus (Click "Start" --> All Programs --> ADSelfService Plus --> Stop ADSelfService Plus).
* Take a backup of "ApplicationResources_en_US.properties" file located at "C:\Program Files\ManageEngine\SelfService Plus \resources\adssp" folder, as "ApplicationResources_en_US.properties_bak" and change the context in file.

adssp.domain_user.enrollment.button_enroll=Enroll

* Start ADSelfService Plus (Click "Start" --> All Programs --> ADSelfService Plus --> Start ADSelfService Plus).

Note: Use the above instructions to customize any message in the application.

Regards

Mike

ADSelfService Plus Team

Direct Tel : +1-408-916-9890

E-mail : support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : My Info Self Update Domain Controller

September 9, 2013, 7:38 pm

≫ Next: Re : Recommended Practice for Self-Service Reset?

≪ Previous: Re : Text in a button

Hi,

Yes, it will render the "Site Based DC" configuration.

Regards

Mike

ADSelfService Plus Team

Direct Tel : +1-408-916-9890

E-mail : support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : Recommended Practice for Self-Service Reset?

September 10, 2013, 6:50 am

≫ Next: Can I remove "Update Your Profile Efficiently" Options from the login screen?

≪ Previous: Re : My Info Self Update Domain Controller

I did a lot of reading on the challenge questions, if you google "good" challenge questions there is a wealth of information.

The conclusion I drew is that questions such as mother's maiden name are the worst as these types of things are easy to find on social network sites such as facebook. As a test I got some test users to enrol with the traditional questions, I then tried to reset a users password by typing in their username, the questions the person had used were mother's maiden name and place of birth - I found both answers on facebook! (I didn't reset their password by the way)

I put forward to our security group that we change the questions, although there is no such thing as a "good" question there are some that are more secure than others. The theory is that you need to have questions that the person will have a memorable answer for that only they will know, for instance the name of their favourite childhood cartoon character or the place they had their first kiss. One of my questions is "where were you when you heard about 9/11" - a bit morbid but I can remember clearly where I was.

If you really want to go down the security rabbit hole ask your users to use pass phrases (answers can be up to 255 characters) or use random answers to the questions. Can appreciate that this will be a massive ask for the average user though

Cheers

Rich

↧

Can I remove "Update Your Profile Efficiently" Options from the login screen?

September 10, 2013, 6:52 am

≫ Next: Mobile site

≪ Previous: Re : Recommended Practice for Self-Service Reset?

I have disabled the option for the users to self update but it still appears on the Self Service login screen, can I change the login screen to remove the option?

Thanks

Rich

↧

Mobile site

September 13, 2013, 9:47 am

≫ Next: Imported wildcard SSL certificate in ADSelfService - http and https ports unresponsive

≪ Previous: Can I remove "Update Your Profile Efficiently" Options from the login screen?

Its great we got the mobile version of the site but how do we direct our clients to use it? Most versions of mobile sites auto direct you to the mobie version when you hit the site if it detects a mobile device... With ADSelf service will they need to know the url as the only route? kinda useless if so. My students will never access it that way.....

↧

Imported wildcard SSL certificate in ADSelfService - http and https ports unresponsive

September 16, 2013, 3:38 am

≫ Next: Certifcates from Windows Internal CA

≪ Previous: Mobile site

Hello,

We have followed instructions in "ADSelfService Plus: Guide to Install SSL Certificate" with a Thawte wildcard certificate.

The Keystore generation did not report any error and the SelfService.keystore generated was copied to <install_dir>\conf folder.

Server.xml has been modified to specify SelfService.keystore with the associated password on default port 9251:

Since service has been restarted, I cannot access neither http nor https pages.

With netstat -a I noticed neither port was listening,

I stopped service and tried to launch console : nothing happens

My SelfService Plus is now unreacheable.

Thanks in advance for help.

Regards,

Patrice Mariet

↧

Certifcates from Windows Internal CA

September 17, 2013, 9:37 am

≫ Next: Re : Certifcates from Windows Internal CA

≪ Previous: Imported wildcard SSL certificate in ADSelfService - http and https ports unresponsive

I am suing a Windows Internal CA and want to use certificates from this CA. The guide provided here: http://www.manageengine.com/products/self-service-password/adselfservice-plus-ssl-installation-guide.pdf provides no instructions for a Windows CA. I have tried the instructions from this link: http://forums.manageengine.com/viewFile.do?fileId=49000005194646&forumGroupId=49000000002007 but also with no success. Can anyone be of assistance?

↧

Re : Certifcates from Windows Internal CA

September 17, 2013, 12:03 pm

≫ Next: ADSELF SERVICE PLUS ISSUE

≪ Previous: Certifcates from Windows Internal CA

I have been able to solve it I was modifying the server.xml file in the wrong place. It has to be done at the end of the file

↧

ADSELF SERVICE PLUS ISSUE

September 18, 2013, 8:11 am

≫ Next: Picture window issue

≪ Previous: Re : Certifcates from Windows Internal CA

i have an issue concernig the starting of windows servicefrom ADSelf Service so when i try to start it Automatically its stopped

Regards

↧

Picture window issue

October 24, 2013, 12:08 pm

≫ Next: Upload picture issue

≪ Previous: ADSELF SERVICE PLUS ISSUE

After the upgrade to version 5.2 when we try to upload a photo, the window appears with some policies strings.

Is this normal? If so, where can I translate this information to Brazilian Portuguese?

I attached the screen.

Regards,

Marcelo

↧