Hi I understand that by default the user is allowed 5 failed attempts with an incorrect password and is then locked out. I have looked at the msdn site and found the bit that talks about the sqlmembershipprovider and a maxreties attibute but can see where to set this in web config or code. Thanks
...
Go to the complete details ...