Hi Jako,

The UserController.UpdateUser does not update all of the details associated with a user.  In 6.0.0, the details actually persisted are in the set { first name, last name, e-mail, display name, and last activity date }.  Hosts also always have their IsApproved bit set.

To change a user's password, leverage the UserController.ChangePassword method.  In a configuration that requires a question and answer, you'll want to look at the UserController.ChangePasswordQuestionAndAnswer method.  

I agree that it is a bit confusing to be able to set UserInfo properties and not see them persisted when executing the UserController.UpdateUser method!

Hope this helps!

Brandon

Edit: I should also mention that this behavior assumes the default DotNetNuke membership provider.  All of this behavior can be modified via a custom provider, although that would be overkill for most all configurations.

---

Brandon Haynes
BrandonHaynes.org