change domain password via web

I would like recommendations for a utility that will allow domain users to change their password via a web page (in a web hosting environment). Also, what security issues accompany your suggestion(s)? Windows 2000 Server/IIS 5 Thanks!