How FastPass SSPR enrolls every user — without IT involvement

Q: What happens if a user never enrolls in SSPR?

They fall back to calling the help desk for every password reset, which defeats the purpose of deploying SSPR in the first place. FastPass's help desk PIN path (Path 3) turns that exact moment into an enrollment opportunity — the supporter issues a PIN instead of just resetting the password, so the user is enrolled by the time the call ends.

Q: How long does SSPR enrollment take for a new employee?

For domain PC users, enrollment happens at first Windows login and takes under a minute. For remote or non-domain users, it depends on how quickly they act on the automated email — FastPass keeps sending reminders on a defined schedule until enrollment is complete, so there's no dependency on the user remembering on their own.

Q: Can SSPR enrollment be enforced, or is it always optional?

It's configurable. At Windows login, you can choose to require enrollment before the user proceeds, or simply prompt them. This is the main lever for organizations that want to guarantee near-complete enrollment quickly rather than waiting on adoption.

Q: Does IT need to manually enroll each user?

No — that's the core design goal. All three paths (Windows login, automated email, help desk PIN) run without IT manually onboarding individual users. IT sets the rules once (enforcement level, email schedule, PIN policy); after that, enrollment happens as users naturally show up through one of the three channels.

Q: What's the difference between SSPR enrollment and SSPR reset?

Enrollment is the one-time setup step where a user registers the credentials (security questions, MFA, etc.) they'll later use to verify themselves. Reset is the recurring action of actually changing a forgotten password. A user can't self-serve a reset until they've completed enrollment — which is why FastPass treats enrollment as a first-class problem rather than an assumption.

Getting users enrolled is one of the most common challenges in deploying a self-service password reset (SSPR) solution. FastPass addresses this with three parallel enrollment paths that cover every user type — domain PC users, remote workers, and users who contact the help desk — ensuring full adoption without requiring IT to intervene manually.

See the enrollment experience in a free demo

Jump to the three paths

Why enrollment is the critical step in any SSPR deployment

An SSPR platform only delivers value once a user is enrolled in it. Enrollment failure — not the reset workflow itself — is the most common reason SSPR deployments underdeliver: if a meaningful share of the workforce never completes setup, every one of those users is still calling the help desk on password day one. FastPass treats enrollment as a first-class problem, not an assumption, by running three enrollment paths in parallel rather than relying on a single rollout campaign.

15–25%

typical enrollment rate from email reminders alone

80–95%

typical enrollment rate when Windows-login prompting is the primary driver

3 of 3

user types covered — domain, remote, and help-desk-assisted

FastPass-SSPR-Enrollment-Drivers Visual Infographic

Three SSPR enrollment paths that cover every user type

Each path targets a different way users actually show up — so coverage doesn't depend on any single channel working perfectly.

Path 1: SSPR enrollment at Windows login (domain PC users)

The FastPass PC client activates each time a user logs into Windows. If the user hasn't enrolled in SSPR yet, FastPass can prompt or require enrollment before they continue — you control how firm the requirement is. For organizations where most users are on domain PCs, this path alone can drive near-complete SSPR enrollment automatically.

Path 2: Automated SSPR email enrollment (remote and non-domain users)

For users who don't log in from a domain PC, FastPass automatically sends enrollment emails on a schedule you define. Emails repeat at your chosen intervals until the user completes SSPR enrollment, each containing a direct link to the FastPass self-service portal. This makes it the most effective path for remote workers, contractors, and mobile-first employees.

FastPass gives you multiple paths to full SSPR enrollment — forced enrollment at Windows login, automated email campaigns, and help desk PIN enrollment — so no user falls through the cracks. How FastPass enrollment works →

Path 3: SSPR help desk PIN enrollment (as a safety net)

When an unenrolled user contacts the help desk for a password reset, the supporter doesn't simply reset the password. Instead, once the user is verified, the supporter issues a one-time help desk PIN. The user then enrolls in FastPass SSPR themselves and resets their own password through the portal. This resolves the immediate issue while ensuring the user is enrolled and ready to self-serve in the future.

FastPass turns every help desk call from an unenrolled user into an enrollment opportunity — without simply resetting the password. Combined with automatic Windows login enrollment and email campaigns, it's a complete enrollment strategy. How FastPass handles SSPR enrollment →

Frequently Asked Questions

What happens if a user never enrolls in SSPR?

How long does SSPR enrollment take for a new employee?

Can SSPR enrollment be enforced, or is it always optional?

Does IT need to manually enroll each user?

What's the difference between SSPR enrollment and SSPR reset?

See FastPass SSPR enrollment in action

FastPass SSPR is designed so that enrollment happens naturally — through the channels users already use — rather than requiring a separate IT-driven campaign.

See the enrollment experience in a free demo

Enrollment is what determines whether an SSPR deployment actually works.

A password reset tool that only 60% of your workforce has enrolled in still leaves 40% calling the help desk — which is the exact cost SSPR was meant to eliminate. Solving enrollment with a single channel (an email campaign, say) treats a coverage problem as an awareness problem. FastPass runs all three paths — Windows login, automated email, and help desk PIN — in parallel by design, so full enrollment doesn't depend on any one channel succeeding.

Protect your Passwords today with FastPass

Get in touch with us today by filling up the form and our team will get back to you as soon as possible.