In the context of DNN running with alternate Authentication Providers, (e.g. Active Directory in corporate environments)  , the ability to make Profile attributes 'Read Only' is very welcome. - theses attributes typically are synchronised (i.e. pulled) from AD on user login - you don't want users changing their personal information in DNN - they need to go back to the central authentication store.

What would close the loop is the ability for Admin's to make User Account information read-only (first name, last name, display name etc) as well as to hide the ability to allow users to change passwords - redundant in an AD environment.

These inclusions, coupled with the removal of the Maximum Roles limitation on the PortalRoles cookie, would make this release ready for Prime Time corporate adoption.

Great work guys.

Ian