ADSelfService Plus (Self Unlock Tool) Enrollment

If you are a new employee, you will need to enroll your Windows account in ADSelfService Plus, giving you the ability to unlock yourself in the event you get locked out of the network.

To verify your identity, you will need to answer two security questions, which can be set up by following the steps below.

If you are an existing employee and already enrolled in the self unlock tool, you can still log in using the steps below to change your security questions/answers.

1. Visit ADSelfService Plus and log in with your Windows username (i.e. JSmith): https://wclels02.ffl.net:9251/

Once you enter your username, the dropdown field below the username field should automatically change from “ADSelfService Plus Authentication” to “FFL,” regardless of the company you work for.  To verify it will change, you can hit the Tab key on your keyboard after entering your username.

Then, click the green Login button.

2. On the next screen, enter your Windows network login password, then click on the green Login button.

3. Once logged in, you will be on the Enrollment – User Registration page as shown below.

Select two security questions and enter each answer twice to confirm it. Then, click Next.

4. You should receive the following message that you are successfully enrolled. Simply close the browser tab / window. You are ready to roll! If ever you get locked out of Windows, you will be able to unlock your account on your own (using the Reset Password / Unlock Account link on the Windows login page) and will be asked to provide the answers to those security questions to prove your identity.

Note: This tool will only work when you are connected to the network, either internally or remotely over the VPN.  However, if you are disconnected from the VPN, your Windows account will not lock out, even after several failed password attempts, because it cannot communicate with our server.  It will only state if the password you have entered is incorrect.

If you are off the network / disconnected from the VPN and attempt to use the self-unlock tool, you may encounter the following error message:

"This action requires MFA verification, ensure the identity verification server is reachable."