Block User :

For improved security, ADSelfService Plus allows administrators to block users who fail to verify their identity via the configured multi-factor authentication (MFA) techniques. When there are too many unsuccessful attempts to reset a password or unlock their account, administrators can block the user's account for a set amount of time.

How to block users

• Enter the maximum number of invalid user attempts that can occur in a specified interval of time, following which the user should be blocked.
• Specify the number of minutes for which the user will remain blocked.

  Example:For instance, say you have set the maximum invalid attempts to be five, defined the time interval as 30 minutes, and specified the period for which the user will remain blocked as 30 minutes. This means that when users fail to verify their identity five times in a 30-minute interval, they will be blocked for 30 minutes. Once a user is blocked, they will not be able to use ADSelfService Plus' reset password and account unlock options.

• You can also restrict the self-service actions performed by users.
  • Enter the number of times users can reset their passwords in a specific number of days.
  • Enter the number of times users can unlock their accounts in a specific number of days.

  

• Select OK.

How to unblock users

• Select the users you want to unblock in the list of blocked users in the Blocked Users report. Click Unblock.
• You can also restrict the self-service actions performed by users.



• Select OK.