This actually happened on the very first day of implementing a new system that utilized the ASP.NET user authentication. Is there anyway for a web admin to perform a password reset without knowing either the password or answer to security question?
In the case of this user, I had to delete their registration info and have them re-register. Maybe that's the price the user pays for such absent-mindedness?
I have modified my registration confirmation email to include the answer to the security question, but then they'll delete the email and still be clueless.
...
Go to the complete details ...