Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a custom MembershipProvider implementation using form-based authentication (FBA) under Sharepoint 2007.

I've searched high and low on Google, but only found:

  • Active directory and FBA implementations to allow users to change their own password
  • Active directory instructions (including video!) for administrators to change other users' passwords

Have we missed an option to enable the latter under FBA? Should this work by default and is the MembershipProvider misbehaving?

The procedure to do this as under active directory would be ideal, but the "Change Password" link does not appear in the Edit User screen. We verified that the logged-in user is a site collection administrator.

share|improve this question
up vote 0 down vote accepted

You need to add appropriate option by yourself.

You can see example implementation in the CKS FBA project at CodePlex:

  1. page UserEdit.aspx contains button BtnReset,
  2. when it is clicked, method OnResetPassword from file UserEdit.cs is called.
share|improve this answer
The page in question is _layouts/userdisp.aspx. We decided going down this route was too complicated, but I think this would work so I'm going to mark this answer as accepted. Thanks! – Jon Seigel Jan 4 '11 at 14:27
The Reset Password button is only displayed when the RequiresQuestionAndAnswer is false, and the EnablePasswordReset is true. This is because if the security question and answer are turned on the admin will not know the answer to the question so they won't be able to reset the password anyways. – Jeff T May 8 '13 at 19:01

Your forms based authentication was probably built in house (you mention that it is custom). The developers would need to include a way for you to do this. Short of that, find the table which stores the usernames and passwords and just change the password. If it is encrypted you can probably just copy the password from an account which you know the password to, but this doesn't always work depending on how the password is salted.

share|improve this answer
The MembershipProvider was built in-house, but the UI is standard. There's no need to go hacking in the database. If the provider isn't fully implemented, then I can deal with that. I'm looking for a common solution (it looks as though there may not be one) before writing a custom solution. – Jon Seigel Jan 3 '11 at 21:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.