Info
KeePass Hub
J. User Administration
Setup Password Reset
Self-serve Password Reset
Reset Users
Setup Security Questions
Setup a Login Reset Policy
Sitemap
Info  >  KeePass Hub  >  J. User Administration  >  Self-Service Password Reset Enrollment  >  Reset Users Page last modified Apr 02 2022, 20:37

Reset Users

Users prefer Pleasant Password Server with a KeePass client!

(Enterprise+, Enterprise+SSO, Stand-Alone Reset Server)

Reset Users can enroll and reset their AD/LDAP Directory passwords. These users only use a very limited set of functions, and do not need access to other features of Password Server.

Related Links:

Reset users can be included as an add-on for Password Server for these editions:

  • Enterprise+
  • Enterprise+SSO
  • Stand-Alone Reset Server

Adding Reset Users

Step 1. Reset Users can only be imported from AD/LDAP (see our AD/LDAP setup guide for more information). This requires the Reset Users to be available on your license. Steps:

  • Users and Roles > Manage Reset Users
  • Click Manage Directories > Setup a connection, specifying a location in the directory for your Reset Users to be imported from
  • Test the connection, then Save
  • Right-click Action button (for this directory connection) > Import from directory
    • These buttons will appear on the Import Users page:
    • Import Reset Users
  • Select the user(s) you wish to import and click import
  • You should then also see these users in Manage Reset Users list

Configuring Reset Users

Step 2. Set the Policy which will be applied to all Reset Users from:

  • Users and Roles > Manage Policies > Policy Administration > Global Settings

Step 3. Create Challenge Configurations to configure how the resets will work:

  • Number / method of Security questions requirements
  • Additional Authentication requirements
  • Selecting Available Questions
  • Applying User Policies

Enrolling Reset Users

Note: Users are not considered enrolled until they have setup all the requirements of their Reset Challenge.

Step 4. Like normal Users, Reset Users must log in to the web client to finish their Enrollment.

When they log in, users will see a message with a link that will take them to an enrollment page:

 Reset Users Enrollment

  • Here users can set their basic information, update their questions, and set up any required two-factor providers.
  • Set Answers in the Security section

 In the future, reset users can modify this information from:

  • Click username (top right-hand corner) > Manage Account > Click on Set Answers (link) in the Security section

Managing Enrolled Users

Step 5.

  • Reset Users can be viewed under Users and Roles > Manage Reset Users
  • The Enrollment Report can be found under Reports > Enrollment Report
    • This displays all Reset Users and their current status
    • Unenrolled users: can also be emailed with a link to setup their Reset Challenge answers

Resetting Logins

Step 6. Once Reset Users are enrolled, they can reset their AD/LDAP passwords via:

Windows Login Integration

There is a credential provider for Windows login integration available in the client download tab of your Password Server or Reset Server installation. Password Server requires an Enterprise+ or Enterprise+SSO license to make use of it.
See Windows Login Integration for full details.