ManageEngine ADSelfService Plus Reviews

The biggest use case is that we needed something to support our password-change policy on mobile devices. It is easy and straightforward for our in-house employees to change their login credentials but it is different for our mobile users. This is in part because some of our mobile users never come back into the office.

The specific challenge that we needed to solve was first providing the ability for mobile users to change passwords on their laptops, but in addition, have those credentials cached so that they could then use them remotely.

This solution has improved our security because our users can now change passwords on the fly.

ADSelfService allows us to add multifactor authentication on our domain admin account. We only use one piece of a fairly extensive feature set. It does a lot of other things, but we're not going to be utilizing them. It is used exclusively for anyone with domain admin rights, which is a handful of service accounts and three administrators. They have to provide an extra one-time password.

Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With  MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message.

It's mostly about keeping track of what's going on, such as passwords that are expiring and multiple login failures, and matching those failures with our third-party applications that do external monitoring from a security perspective.

At the moment, monitoring is one of the most valuable features for us. 

* Enable users to change/reset their forgotten AD password by themselves.

* Enable users to unlock their AD account by themselves.

* Enforce more restricted password policies for AD users.

* Multi-factor authentication.

I've chosen to implement this product for a project where the users' computers are on a workgroup but they need to use an AD username and password to access resources hosted in AWS. Manage Engine AD Self Service Plus allow users to use their service even if their computers are not part of any active directory domain.  

We struggled with the end users because most don't have the required IT background. They needed password resets for emails and accounts in the active directory. This created an issue for the help desk, and the system and ManageEngine ADSelfService Plus gave us a QR solution for the end users. Once an account is set up, you scan the QR code through Google authentication, Microsoft authentication or any program that can authenticate with the QR. You'll automatically generate a code that gives the port to reset or unlock your account very easily.

The solution provides wide options for multifactor authentication. It's Microsoft, Google, SMS, OTP and emails. Everything is possible through multifactor authentication, so it's an extra layer of security.

It integrates with ServiceDesk Plus. That's one of the benefits of using this product - most of their suites integrate, making it a one-stop-shop solution. I used it in my previous role, and it was particularly helpful in managing a large number of users, around ten thousand. It helped to reduce our ticket count.

The most valuable feature of ADSelfService Plus is that it allows users to self-service and cuts down on the number of password resets required.

We use the solution to reset passwords automatically. It is useful for companies that have many employees.

The solution enables agents to reset their passwords.

We use this solution for MFA authentication for our computer users. We are customers of ManageEngine. I'm the head of IT.

The value of ADSelfService is being able to have multifactor authentication in Windows machines.