I have setup a web site on a server using NT 4.0 and MS Exchange server (for email) which my customers dial-in to access. My customers request all accesses to the web site or email be authenticated with passwords lasting no longer than 120 days. That I have done, though my problem is the customers want to change their own passwords through the web site. What I have setup doesn?t work. Any suggestions, please help. Thanks in advance.