ManageEngine ADSelfService Plus Review
Use Cases and Deployment Scope
We have a large workforce that is scattered all over the country and seldom comes to one of our offices. ManageEngine ADSelfService Plus enabled us to allow these workers to remotely change their AD (Active Directory) passwords and enforce a strict password policy.
The ability to apply MFA to certain user groups with sensitive access in the network which greatly enhanced our security to these systems.
Pros
- Remote password changes when not connected to a VPN or at a remote office
- MFA for certain user groups allows standard users to work normally without additional effort
- Excellent reporting
- MFA for certain services such as terminal access greatly enhances security to these servers.
Cons
- Assist with post-implementation reviews to ensure we configured everything correctly
- Better integration with mobile devices such as an app to change M365 passwords for our mobile-only users
- It would be great if password changes of mobile users updates the AD so these accounts don't reflect as dormant AD accounts.
Return on Investment
- Significantly reduced number of support calls for forgotten password, so less support services people required
- The ability to remotely change AD and M365 passwords saved a lot of time and costs of people travelling to offices to change passwords and we were able to reduce the password expiry time to be in line with best practice.
Usability
Other Software Used
ManageEngine ADAudit Plus, ManageEngine Endpoint Central, ManageEngine ADManager Plus
