ManageEngine ADSelfService Plus Empowers Mobile Workforce with Cached Credentials Management

Local Cached Passwords Automatically Updated When Remote Users Reset Their Active Directory Passwords

  • Enables remote users to easily regain access to their machines
  • Reduces password-related calls to the help desk
  • Download a 30-day, free trial at

PLEASANTON, Calif.--()--ManageEngine, the real-time IT management company, today announced that ADSelfService Plus, its self-service password management solution, now updates Windows cached credentials. With this feature, ManageEngine now provides remote users with immediate access to their machines after they reset their passwords, solving one of the most frustrating forgotten password issues facing today’s mobile workforce.

Click to tweet this news.

Whenever a user logs on to an Active Directory domain, the Windows operating system securely caches the domain credentials and stores them locally in the user’s machine. This lets users — especially those who are often traveling or work off-site — log on to their machines when they are disconnected from the corporate network. However, problems arise when users forget their passwords, and the passwords are reset in Active Directory, either by the help desk or by the users through a self-service portal. Because remote users don’t have access to the corporate network, the new domain password and the cached credentials become out of sync. As a result, users will not be able to log on to their machines using their new passwords.

The new version of ADSelfService Plus solves this problem by automatically updating the cached credentials immediately after users reset their Active Directory passwords. It enables users to log on to their machines with their newly-reset passwords, even when they are disconnected from the corporate network. This will reduce password-related calls to the help desk and reduce the computer downtime caused by account lockouts.

“ADSelfService Plus helps users solve password issues on their own and work uninterrupted even when they are away from the office,” said Parthiban Paramsivam, director of product management at ManageEngine. “Users can reset their forgotten passwords using the Windows logon extension employed by ADSelfService Plus, and it automatically updates the cached credentials. All they need is a virtual private network client on their machines to establish a connection with the Active Directory domain.”

Password Manager for Remote Users

When the domain password is reset in Active Directory, the cached credentials in the user’s machine become obsolete. Then, the user won’t be able to log on to his machine and will get locked out. The ADSelfService Plus enhanced Windows logon extension overcomes this situation by synchronizing the locally cached password with the new password in Active Directory. As soon as an end user resets his password in Active Directory using the Windows logon extension, it establishes a secure connection to the domain controller using a VPN client, such as Fortinet, and seamlessly updates the cached password.

ADSelfService Plus uses a multi-factor authentication technique comprising security questions; SMS and email-based, one-time passwords; and Google Authenticator to verify users’ identities. Once verified, users can easily reset their passwords from the logon screen of their machines on their own. The cached credentials will also be updated immediately, allowing remote users to log on to their machines using their new passwords anytime.

Pricing and Availability

ADSelfService Plus pricing starts at $595 per year for 500 users. A fully functional, 30-day trial version is available at

For more information about ADSelfService Plus, please visit, and for more information on ManageEngine, visit Follow the company blog at, on Facebook at and on Twitter at @ManageEngine.

About ADSelfService Plus

ADSelfService Plus is a turnkey IT self-service solution that can easily be implemented by administrators and quickly adopted by end users. It offers password self-service, password expiry reminder, self-service directory updater, multi-platform password synchronizer and a people search. To facilitate anywhere, anytime self-service for end users, mobile apps for Android and iPhone are also available. ADSelfService Plus helps the IT help desk by reducing the chief source of burden — the password reset tickets — and spares end users the frustration due to computer downtime. For more information, please visit

About ManageEngine

ManageEngine delivers the real-time IT management tools that empower IT teams to meet organizational needs for real-time services and support. Worldwide, established and emerging enterprises — including more than 60 percent of the Fortune 500 — rely on ManageEngine products to ensure the optimal performance of their critical IT infrastructure, including networks, servers, applications, desktops and more. ManageEngine is a division of Zoho Corporation with offices worldwide, including the United States, India, Singapore, Japan and China. For more information, please visit; follow the company blog at, on Facebook at and on Twitter at @ManageEngine.

ManageEngine is a trademark of Zoho Corporation. All other brand names and product names are trademarks or registered trademarks of their respective companies.

Tags: ManageEngine, real-time IT, Zoho, ADSelfService Plus, Active Directory, password synchronization, help desk, password management, end-user experience, cached credentials, Android, iPhone, Windows, IT management, user experience monitoring, network management, server management


TECHMarket Communications
Dottie O’Rourke, 650-344-1260

Release Summary

Local cached passwords are automatically updated when remote users reset their Active Directory passwords. Download a free trial of ADSelfService Plus at


TECHMarket Communications
Dottie O’Rourke, 650-344-1260