Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With  MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message.

It's very simple to manage and implement. Its functions are straightforward. You get all the basic features, such as you get the option to unlock the user account if it's locked. You can enforce password policies, and you also have the option to allow them to reset their passwords if they forget it. These were the basic requirements of my company that we could achieve through this product. 

The most valuable feature is the ability for remote users to change their login credentials using their mobile devices when out of the office.  Users are required to changed their passwords on a periodically.  Through the use of ADSelfService Gina service, they can change their password through Active Directory while outside their office and have the locally cached password on their laptop/desktop change at the same time.  This keeps their AD and locally passwords in sync.  

At the moment, monitoring is one of the most valuable features for us. 

The most valuable feature of ADSelfService Plus is that it allows users to self-service and cuts down on the number of password resets required.

The solution provides wide options for multifactor authentication. It's Microsoft, Google, SMS, OTP and emails. Everything is possible through multifactor authentication, so it's an extra layer of security.

The value of ADSelfService is being able to have multifactor authentication in Windows machines. 

Incident management.