Send enrollment email notification if not registered

Question

As I found out today, the enrollment email notification in the Self-Service policy emails any user account in the domain.

We have some service accounts that are just mail-enabled user accounts, I don't want the notification to get sent to these mailboxes, as the users don't have the login id for the account - they just have the mailbox attached in Outlook.

I created a scheduled task for users, and set if the Powershell script below returns true to send the email out:

if ($Context.TargetObject.IsEnrolled)
{
    $Context.ConditionIsMet = $False
}
else
{
    $Context.ConditionIsMet = $True
}

Is that the way to check if they have enrolled or not?

Comments

Not sure about the script, but are your service accounts in the same OU as the users? If not, just assign the Password Self Service policy to only the OUs with the users. Another thing that should work is to add all the service accounts to a group and then exclude the members of that group from the policy.

Answer 1

Hello,

Password Self-Service Enrollment notifications are sent only to the users affected by a Password Self-Service Policy. So, the best option would be just to exclude your service accounts from the Activity Scope of the Password Self-Service Policy. For example, if all your service accounts are located in certain OUs, you can exclude these OUs from the Activity Scope of the policy.

Another option can be to use Business Units. Business Units are virtual collections of Active Directory objects that are grouped based on certain common criteria. A Business Unit may include members of specific groups or children of certain containers/OUs, objects that match a specific LDAP filter or even specific objects that you can specify explicitly. So, you can group all your service accounts into a Business Unit and then exclude the whole Unit from the Activity Scope of the Policy. For more information on Business Units, see Business Unit Overview.

On how to include or exclude objects from the Activity Scope of a Password Self-Service Policy, see the 3rd step of the Configure Password Self-Service.

jiambor, thank you for your active participation, we really appreciate it!