I'm most interested in how you approached and solved the security issues in how to absolutely and uniquely identify a user.
Has to be better than our system which just asks for employee # and birthdate. :-/ You don't even need to know the old password.
List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/