I just tried a password reminder again after logging into the site this morning and got the current (AD) password send back. So it looks to me that if you're running in mixed mode the password will get updated everytime you log into the portal but it sounds like it doesn't if you're using full authentication (based on another post from the last couple of days). Dan, I know you've got a "Push button to login" method for your AD users on your mixed mode site but can't remember your URL or how you did it. I'm guessing it was just a link to the windowssignin.ascx correct?

In any case, old or new I personally don't like the idea of AD passwords being stored in the DNN db in any shape or form. In an educational situation like you and I are in I can see too many possible problems. I don't know how many times I've walked into a lab to find students have left the room to go to their locker, to the bathroom, a cigarette, etc. and have left their computer unlocked and email open. The potential for another student to "steal" their password is too great imho.

You're right that this project has to get in motion again. I hope the core team is making headway in recruiting a new lead for the project. I'm going to go through the DNNUpdate code this weekend if I get a chance and see if I can't find a better way to handle passwords.