For ASP.Net application I am using visual studio 2008. In that i am using Existing PasswordRecovery control provided by asp.net. In this option i was only asking username for Resetting password.
I have created 100 users using Existing CreateUser Control provided by ASP.Net.
My password setting and QuestionAnswer setting was stored in encrypted (Hashed) format.
For creating these users i have use following membership setting in web.config file(mainly requiresQuestionAndAnswer property was set to False).
<membership defaultProvider="SqlProvider" userIsOnlineTimeWindow="20">
<providers>
<clear/>
<add name="SqlProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=1.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="TicketsServicingConnectionString" enablePasswordRe ...
Go to the complete details ...