|
|
In this page we discuss
The users who can be restricted from using the License
License management involves the process of restricting users who fall under the following five categories:
Account Expired Users
Account Disabled Users
Inactive Users
Deleted Users
Service Accounts
Smart Card Users.
1.Account Expired Users:
This happens for user accounts that are created for a shorter time duration (eg.in the case of a temporary employee). As the account's time duration elapses,the user account gets expired - as there is no point in maintaining a disembodied account. A user with an expired account will be stripped of his license.
2.Account Disabled Users:
The rights for disabling a user account is in the hands of the administrator. By disabling a user account,the administrator denies user the access to ADSelfService portal. This usually happens when a user retires from an organization.
3.Inactive Users:
License Management feature allows the administrator to block users who have been inactive for a specified time period.The time period can be set to any number of days (your choice). Using this feature you - the administrator - can take precautionary steps inorder to prevent any disarray in an organization.
|
|
All the Domain Controllers of the selected domain must be configured in ADSelfService Plus using Domain Settings in order to create a valid inactive users list. |
4.Deleted Users:
Just as the license management
feature restricts the inactive users, it can also forbid the deleted users
from accessing the ADSelfService portal.As in most cases, there is no need
of licenses for users who have been deleted from an organization.
5.Service Accounts:
A service account is a user account that is created explicitly to provide a security context for services running. Resetting the password for that account will stop the service from running. To avoid such cases service accounts are restricted to access ADSelfService portal.
6.Smart Card Users:
Users can use a Smart Card to authenticate themselves in Active Directory. In such a case, administrators can restrict smart card users from accessing the ADSelfService password management portal using this License Management feature.
|
|
When a user gets restricted,then the entire database related to that particular user is lost.The user will be restricted from following locations:
|
Configuring the License Management Feature:
The license management feature can be configured to restrict users either manually or automatically.
Navigate to Admin --> License Management --> Restrict Users
Select the required Domain
Select the desired OUs (if you want to restrict users from a particular OU)
Click Restrict Users icon. A new window will open
From the Account Type drop-down menu select the type of users you want to restrict
Click Generate. A list of users of the selected type will be generated
Select the users you want to restrict. You can select all the users at once or a particular user.
Click Restrict
Once restricted, the user will not be able to log in or perform any actions using ADSelfService Plus. The enrollment data of the user will be deleted too.
Navigate to Admin --> License Management --> Restrict Users
Click Schedule to Restrict icon. You will be taken to the Restrict Users Scheduler page
Click Add New Scheduler
Enter a Name and Description for the scheduler
Select the domain and the desired OUs
Now select the type of users that you want to restrict
Specify the duration for running the scheduler
You can also specify a email ID to which the restricted users list will be sent periodically
Click Save
Once restricted, the user will not be able to log in or perform any actions using ADSelfService Plus. The enrollment data of the user will be deleted too.
Navigate to Admin --> License Management --> Restrict Users. The restricted users list will be displayed
Select the users you want to reinstate
Click Allow Access
A
message box will appear stating that the user was successfully reinstated
|
|
When a user gets reinstated,the administrator has to re-enroll that particular user (since the information associated with the restricted users gets lost) |
Reinstate Users Automatically:
Navigate to Admin --> License Management --> Restrict Users.
Click Schedule to Unrestrict(Permit).
Enable the scheduler.
Select the types of users.
Click Save.
|
|
