What I did to get around this issue... I edited the ASP file for the user's web page that changes the PIN. I set it so it would not require the old PIN to change the PIN. So user does not have a PIN to begin with... Its blank... The Change PIN web page would not let you enter a blank PIN... so by getting rid of the requirment to enter the old pin to change it... my users can just go create a new PIN. I dont see the need for the old pin since the user has already authinicated themselves with a password.... In fact I dont see a need for this pin. Why not just use the password for the user..
