ActiveDirectoryMembershipProvider - Help???

[mannyl]

Hopefully one of you have worked with the .net 2.0
ActiveDirectoryMembershipProvider or some varient they of. please
reply to (e-mail address removed)

What I want to reference is the resetpassword method of the Membership
user class. What I have done is create all the AD schema entries. I
have pointed my web.config file properly at these items. Yet I still
get the "Attribute schema mappings for bad password answer tracking
must be specified to enable password reset functionality."

Do you have any insights?

Code is pretty straightforward. and no my password isn't password

Membership.ValidateUser("admin", "password") 'Domain Admin account
or password reset account; hangs here
TheUser = Membership.GetUser(struser, False) 'Gets the user
newPass = TheUser.ResetPassword() ' Should return the password the
thing is reset to.

Web.config settings

<connectionStrings>
<add name="ADTestService"
connectionString="LDAP://vdmacc.edu/ou=Students,dc=vdmacc,dc=edu"/>
</connectionStrings>
<system.web>
<membership
defaultProvider="AspNetActiveDirectoryMembershipProvider">
<providers>
<add name="AspNetActiveDirectoryMembershipProvider"
type="System.Web.Security.ActiveDirectoryMembershipProvider,
System.Web, Version=2.0.0.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="ADService"
connectionProtection="Secure"
connectionUsername="admin"
connectionPassword="password"
enablePasswordReset="true"
enableSearchMethods="true"
requiresQuestionAndAnswer="True"
applicationName="/"
description="Default AD connection"
attributeMapPasswordQuestion="PasswordQuestion1"
attributeMapPasswordAnswer="PasswordAnswer2"
attributeMapFailedPasswordAnswerCount="badPwdCount"
attributeMapFailedPasswordAnswerTime="badPasswordTime"
attributeMapFailedPassswordAnswerLockout="lockout"
Time="lastBackupRestorationTime"
requiresUniqueEmail="true"
clientSearchTimeout="30"
serverSearchTimeout="30"
passwordAttemptWindow="10"
passwordAnswerAttemptLockoutDuration="30"
maxInvalidPasswordAttemps = "5"
minRequiredPasswordLength="6"
minRequiredNonalphanumericCharacters="1"

/>
</providers>
</membership>


PS. I have the changepassword method working perfectly. Which is
awesome.