Is there any way in active directory that ICT technicians can change users password without being builtin administrators or domain admins. I manage a domain, recently alot of users are forgetting there passwords (reason off on holiday, when they return they cant remember there password), i need a solution that ICT technicians can reset passwords in an OU, but cant change Domain admins, Domain Administrator and other important accounts