IF you have a website web.config where you have password retrieval as false, like this

<add name="AspNetSqlMembershipProvider" 
              type="System.Web.Security.SqlMembershipProvider" 
              connectionStringName="SiteSqlServer" 
              enablePasswordRetrieval="false" 
              enablePasswordReset="true"

AND you have a user who's account has been set to "update password" so that on next login they much set a new password for their account,

currently the advanced login module displays an error message when the user enters their new password/confirm new password and then submits the form:

"Password Retrieval is not enabled"

this seems like an unintended error. If the user is set to reset their password on next login, the core login module accepts/handles this and allows the user to set their new password.

Can you check into this for Advanced Login?