When does Enzoic email users and administrators about compromised passwords?
Print
Created by: Jeff Kasser
Modified on: Fri, 6 Nov, 2026 at 11:22 AM
When emails are sent
- Enzoic emails when it first detects a compromise, when it takes a remediation action, and when a compromise is resolved.
- Addresses under Administrative Notifications always get these emails. The affected user is emailed too if Notify affected end user by email is selected in the policy.
- Each notice is sent once; Enzoic doesn't send repeat reminders. To notify a user again, open Reports → Compromised User Report, select the user and send the notification again.
- No email is sent after an ordinary password change, only when a change clears an existing compromise.
Remediation actions
- Changing a policy's remediation option affects only new compromises. Existing ones keep the action that was set when they were detected.
- Delayed actions (for example, disable after 168 hours) only happen if the user hasn't changed their password by the deadline. When they do happen, Enzoic sends an email saying the user hasn't changed their password and the action has been taken.
- Force password change now sets the AD flag that makes the user change their password at next sign-in.
- Disabling an account and forcing a password change are ordinary AD settings. Any domain admin can re-enable the account or clear the flag in Active Directory Users and Computers.
Jeff is the author of this solution article.
Did you find it helpful?
Yes
No
Send feedback Sorry we couldn't be helpful. Help us improve this article with your feedback.
