ASP.NET Membership user forgot password

What I ended up doing was the following

public string ResetPassword(string email)
        {
            var m_userName = Membership.GetUserNameByEmail(email);
            var m_user = Membership.GetUser(m_userName);
            return m_user.ResetPassword();
        }

then I added a new method to use this value to change the password

public bool ChangeLostPassword(string email, string newPassword)
    {
        var resetPassword = ResetPassword(email);
        var currentUser = Membership.GetUser(Membership.GetUserNameByEmail(email), true);
        return currentUser.ChangePassword(resetPassword, newPassword);

    }

Your solution is fine... Generating a GUID is OK for temporary password resets. Just be sure you aren't generating it until the user asks for it, then add it to their profile with a timestamp... and give it a very short window of opportunity, like an hour. Reset/clear it when the user accesses the URL.