Hi, 

is it possible to setup a password policy that makes sure that a user can not change his/her password to one of the previous ones?

you cant change your password to the same as it was now, but you can change it to the one before that. (so you need to be able to say that its not possible to use one of the last 10 passwords as a new password)

if i force my users to change the password every 60 days, they still use the same password as before/

Thanks

 Here is my solution:

http://www.bitconsultancy.be/TechPagina/tabid/1478/ctl/ArticleView/mid/3021/articleId/617/My-own-sql-membership-provider.aspx