If you go to the Security Roles area under the Admin section, then choose User Settings, you are presented with a ton of options about the passwords for the users.  There are two sections here that have values I want to change:  Membership Provider Settings and Password Aging Settings.
 
However, under the first, I see this paragraph:
 
"In this section you can review the membership provider's settings. Some providers may allow you to edit the settings. The default provider based on the ASP.NET MemberRole requires you to edit web.config, so the settings can not be updated here."
 
I opened the web.config but was unable to find anything in there that I could change to dictate password length, non-alphanumeric chars, regular expression, etc.  Where in the web.config file do I do this editing to effect these values?

-- Andrew