I would like to build a webpage that allows a selected user of my application to reset other user's passwords. Access to the page would be limited to users in a specific role, I'll call this role siteadmin. It seems that the best way for this to work would be to allow the siteadmin user to select a user and click a button. Further, the site admin user should be able to do this without having to know the password answer.
At the same time I would like users that have not logged on and need to reset their password to have to enter the password question and password answer before the password is reset and emailed to them.
The reason I want to do this is that I've run into a number of users that can't remember their passwords and have a hard time figuring out how to reset them. It would be easier for everyone if they could call someone and have them reset the password to a random value and have ...
Go to the complete details ...