Hello,
I'm trying to create a website for a co-worker that allows users to change their password in Active Directory.
The website is using Forms authentication with the ActiveDirectoryMembershipProvider and a login control. If the user knows their ID and current password, the user can go to a page that allows them to change their password(using DirectoryEntry and the Invoke method).
Since I am using Forms authentication and the <deny users="?"/> <allow users="*"/>, people that login can change their password. I have this part working.
My problem is If a user forgets their password, they goto a page to input their user ID and answer 3 questions. They won't be 'authenticated' so I don't know how to give them access to the Change Password page. Maybe set a boolean variable true if questions answered correctly.
The only idea I can come up ...
Go to the complete details ...