Active Directory Self Service Password Reset Tool

A self-hosted web portal that lets employees securely reset forgotten passwords, unlock accounts, and update their Active Directory profiles - without calling the helpdesk. Deploy as an AMI on AWS, join it to your domain, and give users instant, policy-compliant password recovery from any browser.

• Self-hosted, zero cloud dependency. Your identity data never leaves your AWS environment. Unlike cloud-dependent competitors, InfraSOS runs entirely within your VPC, giving you full control over credential flows and network boundaries.
• No agents required. The portal communicates directly with your Active Directory domain controllers - no endpoint agents to deploy or maintain across your fleet.
• Deploys in minutes. Launch the AMI, join the instance to your domain, configure via browser, and your users can start resetting passwords the same day.

See the Pricing tab for current metered rates based on your deployment.

• Self-Service Password Reset. Users reset their own passwords via a secure web portal, any time and from any browser, validated against your existing AD domain password policy.
• Password Policy Enforcement. Every reset is checked against your Active Directory complexity and minimum length rules automatically.
• Password Expiration Notifications. Schedule automated emails reminding users to change passwords 14, 7, and 3 days before expiry, with fully customizable templates.
• Employee Search Portal. An internal directory lets users find colleagues by name, department, job title, email, manager, phone, office location, and last logon date.
• Self-Service Profile Updates. Users update their own AD attributes - mobile, office phone, city, state, street address, postal code, and more. Control edit permissions via AD security groups.
• Remote Desktop Password Change. VDI and RDP users change passwords directly through the portal so remote sessions stay synchronized.
• Active Directory Reports. Admins run reports on disabled users, expired passwords, never-expire passwords, users who never logged on, inactive users (60+ days), and export to CSV.
• Active Directory Management. Enable or disable accounts, reset passwords, and take action directly from reporting views.
• Admin Dashboard. A single overview of user accounts, password expiration status, and account activity across your domain.
• Branding and Customization. Customize the portal header, icons, text, and notification email templates to match your organization.

• Healthcare shift workers locked out mid-shift can reset passwords from a shared kiosk without waiting on IT, minimizing patient care disruption.
• Remote and hybrid teams across 500 to 5,000 seat environments recover access instantly without timezone-dependent helpdesk availability.
• VDI environments in call centers and education labs keep credentials current with in-portal password changes that sync remote sessions.
• IT administrators gain quick visibility into expiring passwords, inactive accounts, and disabled users to maintain security hygiene.
• All employees benefit from a searchable company directory to find colleagues and their contact details.

• Portal traffic secured with HTTPS and SSL certificate support.
• Access to self-update and administrative functions governed by Active Directory security groups.
• Password changes enforced against your existing AD domain complexity and length policies.
• Self-hosted architecture means identity data stays within your own AWS environment.

InfraSOS is delivered as an AMI on AWS. Launch the instance, join it to your Active Directory domain, and configure the portal through a browser-based setup wizard. The instance communicates with your domain controllers over standard AD ports. See the Pricing tab for metered pricing details.

Deploy an EC2 instance using this AMI, Add to your domain, then follow our post deployment guide on: https://support.infrasos.com/article/14-infrasos-self-service-password-reset