Body
Search for user:
Verify the user's identity by having them answer one of their security questions.
You can found them here:
After they have been verified, continue to reset the password.
Reset it to something general and have them login and reset with their own.