Self-Password Reset

Question

When using the Self-Password Reset functionality, is it possible to have a user's locked account automatically unlock itself when they self-reset their password? This would be without turning on the Account Unlocking option.

If this isn't an option, is there a way to keep the "Unlock Account and Reset Password" option and disable/hide the "Unlock Account" option when using Self-Password reset? Basically I want to force locked out users to reset their passwords. Hiding the "Unlock Account" option will keep users from attempting to serially unlock their own accounts over and over again.

Answer 1

Update 2018

Starting with Adaxes 2018.1 users have the possibility to only unlock their account oralso reset their password via the Self-Service feature. The option is displayed only if the account with the provided username is currently locked out.

Original

Hello,

Yes, it's possible to automatically unlock locked users upon self-password reset without enabling the Account Unlocking option. For this purpose, you need to create a Business Rule triggered After self-resetting password that automatically unlocks all locked out accounts. To create such a Business Rule:

1. Create a new Business Rule.

2. On the 2nd step of the Create Business Rule wizard, select User and After Self-resetting password.
   

3. On the 3rd step, add the Run a program or PowerShell script action and paste the following script:
   

    $isAccountLocked = $Context.TargetObject.IsAccountLocked
    if ($isAccountLocked)
    {
      $Context.TargetObject.IsAccountLocked = $False
      $Context.TargetObject.SetInfo()
    }
   

4. Finish creation of the Business Rule.

Comments

So this script will unlock ALL locked out accounts on the domain, not just the one that needs it?

---

Hello,

The script created per the instructions above will unlock accounts for all users who reset passwords for themselves using Password Self-Service. Proceeding from your initial post:

is it possible to have a user's locked account automatically unlock itself when they self-reset their password?