This may be a dumb question, but If a user is enrolled in the Self Service password reset under a policy applied to a specific OU, what happens when the user is moved to an OU not covered by any policy? Are they prevented from using the service at all or simply not allowed to enroll?

by (390 points)

1 Answer

by (216k points)
Best answer
0 votes

Hello,

Such a user will be able to reset their password and disenroll, but won't be able to enroll or re-enroll.

Related questions

We have a few password self-service policies mostly using the Microsoft Authenticator app but certain users need to use Questions instead. We have a single user that, in the admin ... mode to make sure it is not a cache issue. Your help is greatly appreciated!

asked Dec 7, 2020 by mark.it.admin (2.3k points)
0 votes
2 answers

We recently upgraded to 2025.1 and noticed (see screenshot) that there is no confirm password box for self-service password reset now. I cannot find in web config or ... password, and since there is no Confirm Box; they are setting an incorrect new password.

asked 2 days ago by stevemkoenig (20 points)
0 votes
1 answer

The mail attribute pulls from their Active Directory email attribute which for most of our users is their internal email address. They would not be able to ... ourselves and the users could just provide their external email address during portal enrollment.

asked Sep 22 by jturgeon (20 points)
0 votes
1 answer

I see the script for generating a report of users enrolled, but what I'd like to do is run a script that can populate a user attribute with Yes/No or True/False if they are or are not enrolled. Is there an existing script that accomplishes this? Thanks

asked Nov 19, 2024 by msheppard (880 points)
0 votes
1 answer

We need to know specifically for self service password management what level of access in AD do I specifically need.

asked May 9, 2024 by justinspring (20 points)
0 votes
1 answer