Is there a way to allow administrators to change or reset user passwords?

Question

We have a custom MembershipProvider implementation using form-based authentication (FBA) under Sharepoint 2007.

I've searched high and low on Google, but only found:

• Active directory and FBA implementations to allow users to change their own password
• Active directory instructions (including video!) for administrators to change other users' passwords

Have we missed an option to enable the latter under FBA? Should this work by default and is the MembershipProvider misbehaving?

The procedure to do this as under active directory would be ideal, but the "Change Password" link does not appear in the Edit User screen. We verified that the logged-in user is a site collection administrator.

Answer 1

You need to add appropriate option by yourself.

You can see example implementation in the CKS FBA project at CodePlex:

1. page UserEdit.aspx contains button BtnReset,
2. when it is clicked, method OnResetPassword from file UserEdit.cs is called.

Answer 2

Your forms based authentication was probably built in house (you mention that it is custom). The developers would need to include a way for you to do this. Short of that, find the table which stores the usernames and passwords and just change the password. If it is encrypted you can probably just copy the password from an account which you know the password to, but this doesn't always work depending on how the password is salted.