Password Reset Server from Thycotic enables your end-users to securely reset their Active Directory and Office 365 passwords from a web portal or integrated Windows Logon screen.

IT admins and security teams can add custom end user password security policies, and permit users to update their AD attributes such as address and phone numbers through the portal.



Enforces stronger and more secure end-user password controls. Meets Section 508 compliance standards.


Password Reset Server frees up your IT help desk staff from time-consuming and inefficient processes and gets employees back to work without waiting on help desk staff.


Greatly improves your organisation’s efficiency and bottom line at a very affordable price.


Reliable, USA-based support makes Thycotic Password Reset self-service tool your best choice for any size organisation.

Secure Identity Verification

Windows Logon Integration and Web Portal

AD Attribute Maintenance

Password Reset Server can verify user authenticity with phone verification by calling or sending an SMS to the phone number registered to the user’s account, and provide a pin code. Customisation security questions can also be configured, and identification questions can even include image recognition questions.

Our Windows Logon screen means end-users initiate the password reset process from their workstation. Advanced security features confirm the user’s identity. Offline Reset allows remote users to perform password resets through a secure portal, even when their computers are offline.

Enable end-users to make changes to their AD attributes, like home address and phone number. Administrators can choose which attributes can be viewed and modified by enrolled users. Users can also validate that their information is correct, so invalid information can be captured through reports.

Custom Security Policies

Automated or Custom Enrollment

Section 508 Compliant

Trust-based security policies customise password reset procedures based on your Active Directory OU structure. All activities, including password resets and changes to security policies, are audited for added security and documentation for compliance requirements.

Administrators can automatically enrol employees or allow them to manually enrol and set their own security questions. Manual enrollment includes automatic email reminders to encourage and track enrollment by sending emails from within the application.

Password Reset Server is accessible to your employees with disabilities and is compliant with Section 508 requirements.



Thycotic Group Management Server empowers non-IT business managers to securely manage their department’s Active Directory Groups without assigning them a privileged account.

Using Group Management Server business department heads can easily manage their AD groups, ensuring the right people are included in their email groups, giving their staff the correct access to file systems. Group Management Server provides attestation of who has access to what, a major benefit in demonstrating proper governance and risk management.

Centralised Group Display

Manage Active Directory Groups in one central location. Gather information, view activity, and reports, and configure Active Directory Group membership.

Self-Service Group Management

Your end users can make trackable changes to AD Group membership without involvement from IT. And our intuitive self-service format makes it easy!

Group Auditing

Increase accountability and accuracy, and achieve compliance mandates using the Active Directory audit feature to gain visibility into Group membership.

Role-Based Access Control

Administrators control and configure who has access to different features within the software and assign responsibilities based on end-user roles.

Group Security Policy

Extend the level of access control available to your end-users, when desired, by implementing Group Security Policy.

Group Reporting

Generate Group reports viewing details of Group membership changes, Group owner status, or Group summaries. Get detailed reports to help meet compliance mandates.