Password Manager 5.7.1 - Administrator Guide (AD LDS edition)

Enable Account

Use this activity to enable users’ disabled accounts. You can use the activity in different workflows. It is recommended to place this activity after authentication activities in a workflow.

For example, to enable users with disabled accounts to reset passwords and enable their accounts, you can use the Enable Account activity in the Forgot My Password workflow:

1. Authenticate user with Q&A profile.
2. Enable account.
3. Reset password in AD LDS.
4. Restart workflow if error occurs.
5. Email user if workflow succeeds.
6. Email user if workflow fails.

Force User to Change Password at Next Logon

Force User to Change Password at Next Logon

Use this activity to require users to change their passwords at next logon. For example, you can use this activity in the Forgot My Password workflow to force users to change passwords at next logon, after the password has been reset by Password Manager.

It is recommended to place this activity after the Reset password in AD LDS and Change password in AD LDS activities in a workflow.

Assign Passcode

Assign Passcode

This activity is a core activity of the Assign Passcode workflow. It allows helpdesk operators to assign a passcode to the user who has forgotten password and is not yet registered with Password Manager or has forgotten answers to secret questions. This activity has the following settings:

• Passcode length. Specify how many characters a passcode must contain.
• Passcode lifetime. Specify how long a passcode issued by helpdesk operators is valid.

Unlock Q&A Profile

Unlock Q&A Profile

This activity is a core activity of the Unlock Q&A Profile workflow. It allows helpdesk operators to unlock users’ Questions and Answers profiles using the Helpdesk site.

You do not need to configure any settings for this activity.