Useful error message for AdMembership provider

I'm looking to get usefull error message for the ADMembership provider (or our of AD at all really) for the following cases.

User fails to log in

User fails to change password.

If the process throws an exception I use that message, and it's helpful (especially for password) but past that I'm winding up identifying a confusing reason for a generic message,then writing specific code to detect that condition and returning a useful message.

So for example instead of a generic message "you failed the rules and complexity requirements" i can tell them WHICH rule or co开发者_运维技巧mplexity requirement they failed, and maybe why.

I feel like this should be a solved issue and I'm reinventing the wheel, anyone out there that can point me to a better way to do this or someone who's gone down the same road and taken to the end?

Thanks,

Eric-