Is there a way to create an account that would be able to reset admin passwords without giving them rights as domain admins. we are trying to keep the number of people with admin rights to a minimum. We are running in native mode and use active directory.