Adaxes: Self-Service Password Reset and Account Unlock

Introduction

• Common issue: Forgotten passwords and locked accounts.
• Traditional solution: Call help desk for password reset.
  • Security risks and demands on help desk.
• Adaxes solution: Autonomous user password reset and account unlock.

How Adaxes Self-Service Works

• Users reset passwords/ unlock accounts without help desk.
• Process:
  • Click "Reset Password" link on logon screen.
  • Enter username.
  • Verification through multi-factor authentication (MFA):
    • Google Authenticator for one-time password.
    • SMS verification code.
    • Security questions (set up during enrollment).
  • Choose to unlock account and/or reset password.
  • Generate a new password.
• Web-based interface allows:
  • Remote access via internet.
  • Use on any device (PCs, laptops, tablets, phones).

Password Self-Service Policies

• Different policies for different user groups (e.g. managers, executives).
• Customizable settings:
  • Authentication mechanisms: security questions, SMS/email verification, time-based one-time passwords.
  • Number of security questions, minimum answer length, etc.
• Enrollment is required for self-service:
  • Users provide security answers, phone numbers, and app setup.
  • Notifications remind users to enroll.

Monitoring and Management

• Monitor enrollment progress, reset attempts, and blocked users.
• Automatic unblocking after set time or manual intervention.

Deployment

• Installation of DAX's self-service client on machines for Windows logon screen reset capability.
• Centralized management via group policies.

Off-Site and Offline Password Reset

• Off-Site Reset:
  • Allows self-service password reset when off the corporate network.
  • Syncs password changes to both Active Directory and locally on laptops.
• Offline Reset:
  • For scenarios without internet access (e.g., hotels without Wi-Fi).
  • Users complete reset on an internet-connected device, receive a response key to update their laptop.

Benefits

• Reduces help desk workload and security risks associated with telephone resets.
• Extends password self-service beyond corporate premises.
• Ensures forgotten passwords can be resolved anywhere.

Conclusion

• Adaxes provides a secure, user-friendly, and flexible solution for password self-service.
• Enhances user autonomy and reduces reliance on IT support.