ManageEngine Self Service Password : Admin Guide Table of Contents WELCOME TO ADSELFSERVICE PLUS! ................................................................ 5 SELF-SERVICE FEATURES ..................................................................................... 6 GETTING STARTED ................................................................................................. 8 System Requirements for ADSelfService Plus ................................................................... 9 Installation ....................................................................................................................... 11 Working with ADSelfService Plus..................................................................................... 12 Licensing ......................................................................................................................... 16 DOMAIN CONFIGURATION ................................................................................... 17 ROLLING OUT ADSELFSERVICE PLUS ............................................................... 20 Password Self-Service Deployment ................................................................................. 22 Requirements For Deploying The Password Self-Service Task: .................................................. 22 Policy Configuration ....................................................................................................................... 25 Identity Verification ......................................................................................................................... 26 Enrollment: ..................................................................................................................................... 27 Security Settings: (Features Under Advance Tab) ........................................................................ 30 Taking The Features To The End-Users ....................................................................................... 31 Implementing Password Reset/ Account Unlock process.......................................................... 32 Implementing Self-Update Feature ............................................................................................ 33 Implementing Change Password Feature .................................................................................. 34 Employee Search Deployment ......................................................................................... 35 Password Notification Deployment ................................................................................... 36 Password Synchronizer Deployment ............................................................................... 37 Mail Group Subscription Deployment ............................................................................... 38 Self-Service Approval Workflow Deployment ................................................................... 39 KNOW YOUR PRODUCT ........................................................................................ 40 Dashboard ....................................................................................................................... 41 Reports ............................................................................................................................ 43 User Reports .................................................................................................................................. 44 Enrollment Reports ........................................................................................................................ 46 1 Zoho Corporation ManageEngine Self Service Password : Admin Guide Audit Reports ................................................................................................................................. 49 Configuration ................................................................................................................... 51 Self-Service .................................................................................................................................... 52 Policy Configuration ................................................................................................................... 53 Identity Verification ................................................................................................................. 55 Configuring Security Question and Answers ...................................................................... 56 Verification Codes ............................................................................................................... 58 Configuring Google Authenticator ....................................................................................... 61 Configuring Advanced Settings ........................................................................................... 62 Advanced Configuration ......................................................................................................... 66 BLOCK USERS................................................................................................................... 67 RESET AND UNLOCK ....................................................................................................... 68 Password Sync Settings ..................................................................................................... 70 Notification .......................................................................................................................... 71 Automatic Rest and Unlock ................................................................................................. 72 GENERAL ........................................................................................................................... 75 Password / Account Expiry Notification: ..................................................................................... 76 Employee Search ....................................................................................................................... 79 Password Synchronizer.............................................................................................................. 81 Password Synchronization with Google Apps ........................................................................ 82 Password Synchronization with Office 365 / Azure ................................................................ 83 Password Synchronization with Salesforce ............................................................................ 84 Password Synchronization with Zoho ..................................................................................... 86 Password Synchronization with Zendesk ............................................................................... 88 Password Synchronization with Microsoft Dynamics CRM .................................................... 89 Password Synchronization with IBM i/AS400 system ............................................................ 90 Password Synchronization with HP UX Directory Server ....................................................... 91 Password Synchronization with Oracle E-business Suite ...................................................... 92 Password Synchronization with Oracle Database .................................................................. 93 Password Synchronization with AD LDS Server .................................................................... 94 Password Synchronization with OpenLDAP Server ............................................................... 95 Password Sync Agent............................................................................................................. 96 Mail Group Subscription ........................................................................................................... 100 2 Zoho Corporation ManageEngine Self Service Password : Admin Guide Administrative Tools ..................................................................................................................... 101 Quick Enrollment ...................................................................................................................... 102 Force Enrollment .................................................................................................................. 103 Enrollment Notification .......................................................................................................... 105 Auto Enrollment .................................................................................................................... 107 External Data Sources .......................................................................................................... 109 Self-Update Layout ................................................................................................................... 111 Field Customization .............................................................................................................. 113 Attribute List .......................................................................................................................... 115 Advanced Self-Update Layout Options ................................................................................ 119 How To : ............................................................................................................................... 120 Gina/Mac Installation ................................................................................................................ 129 Client Software Installation From The ADSelfService Plus Console .................................... 130 Client Software Installation via GPO (Group Policy Object). ................................................ 133 Client Software Installation Via System Center Configuration Manager .............................. 134 Manual Installation Of Client Software ................................................................................. 139 Gina/Mac Customization .......................................................................................................... 146 Gina/Mac Schedulers: .............................................................................................................. 147 Technician ................................................................................................................................ 148 Self-Service Approval Workflow ............................................................................................... 150 Security Center ............................................................................................................................ 153 Security Q & A Strengtheners .................................................................................................. 155 Anti-Hacking System ................................................................................................................ 156 Brute Force/Dictionary Attack Preventers: ........................................................................... 157 Man-In-The-Middle Attack Preventers .................................................................................. 158 Safe-Guard Inactive Account Loopholes .............................................................................. 159 Admin ............................................................................................................................ 160 Customize .................................................................................................................................... 161 Logon Settings ......................................................................................................................... 162 Customize User Logon Page ................................................................................................ 168 Rebranding ............................................................................................................................... 171 Personalize ............................................................................................................................... 174 System Utilities ............................................................................................................................ 175 Automatic DB Backup .............................................................................................................. 178 3 Zoho Corporation ManageEngine Self Service Password : Admin Guide Site Based DC .......................................................................................................................... 179 Product Settings ........................................................................................................................... 180 Connection ............................................................................................................................... 181 Entrusting 'SSL Certification' with SSL Certification Tool ..................................................... 183 Server Settings ......................................................................................................................... 186 Mail Server Settings.............................................................................................................. 187 SMS Server Settings ............................................................................................................ 188 Proxy Settings ....................................................................................................................... 191 Windows Service ...................................................................................................................... 192 License Management................................................................................................................... 193 Restrict Users ........................................................................................................................... 194 TROUBLESHOOTING TIPS .................................................................................. 197 SUPPORT .............................................................................................................. 205 4 Zoho Corporation ManageEngine Self Service Password : Admin Guide Welcome To ADSelfService Plus! This guide offers you information on how to use ADSelfService Plus. ADSelfService Plus: ADSelfService Plus is a self-service application that allows its end-users to perform tasks which are conventionally carried out by the helpdesk officials.So you - as the administrator - get the following benefits by embracing this application:  Reduction in the workload of helpdesk officials: Since end-users can self- service their needs, the workload on the helpdesk officials is immensely reduced.As a result, they would be able to concentrate on more important issues.  Full control over the application: ADSelfService Plus is an entirely customizable application.That is,you have the right to choose the list of features - as well as modify their layouts - to suit your requirements. Highlights:  Self-Password Reset  Self-Account Unlock ADSelfService Plus allows its end-users to perform the 'password reset' & 'account unlock' operations on their own; thereby putting an end to the 'password reset issue' that has proved to be a nemesis for the helpdesk officials. Click on Features Of ADSelfService Plus to take a look at 'what's in store' of this application. 5 Zoho Corporation ManageEngine Self Service Password : Admin Guide Self-Service Features ADSelfService Plus offers the end-users with four Self-Service features: Self-Password Reset, Self-Account Unlock, Change Password & Self-Update.  Self-Password Reset: The highlight of this application which ensures that the helpdesk officials no longer attend to password reset calls.  Self-Account Unlock: Allows the end-users to self-unlock their locked down accounts.  Multi-Platform Password Synchronizer: Any password change happening through ADSelfService Plus can be synchronized with a wide range of cloud-based applications and non-Windows systems.  Change Password: Grants end-users the permission to change their logon passwords.  Self-Update: Allows the end-users to self-update their profile.  Mail Group Subscription: Allow end-users to opt-in or opt-out of distribution groups on their own. Other Add-On Features:  Employee Search: Provides the end-users with the facility of performing quick search for fellow employees (along with Organizational Chart)  Password Notification: Notify the end-users about their expiring passwords so that they can change it.  Mobile Password Management: Let users manage their passwords 'on the go' using their mobile devices. ADSelService Plus has a native app for Android and iOS, and a Mobile WebApp for other mobile platforms. The services offered by ADSelfService Plus can be split into two categories:  Enrollment Requiring Services  Non-Enrollment Services Enrollment Requiring Services: A user has to enroll with ADSelfService Plus in order to avail himself of the 'Self- Password Reset' & 'Self-Account Unlock' features. 6 Zoho Corporation ManageEngine Self Service Password : Admin Guide Non-Enrollment Services: These services do not require 'User Enrollment'. The various services that fall under this category are:  Change Password  Self-Update  Mail Group Subscription  Employee Search  Password Notification 7 Zoho Corporation ManageEngine Self Service Password : Admin Guide Getting Started The following sections describes how to get started with ADSelfService Plus.  System Requirements  Installing ADSelfService Plus  Working with ADSelfService Plus  Licensing of ADSelfService Plus 8 Zoho Corporation ManageEngine Self Service Password : Admin Guide System Requirements for ADSelfService Plus  Hardware Requirements  Software Requirements Hardware Requirements Hardware Recommended Processor P4 - 1.0 GHz RAM 1 GB Disk Space 2 GB Software Requirements Supported Platforms ManageEngine ADSelfService Plus supports the following Microsoft Windows operating system versions:  Windows 2000  Windows XP  Windows 2003  Windows Vista  Windows 2008  Windows 2008 R2  Windows 7  Windows 2012  Windows 2012 R2  Windows 8 9 Zoho Corporation