Change AD account password without joining the domain

Hi,

we have a couple of consultants working for us with a short term agreement. They have brought in their own laptops. I’d prefer not to join their computers to our domain, but I have created them AD accounts to give access to certain network locations. They do not have mailboxes on our Exchange server.

Now the question is, is there any way the users could change their own passwords? Or do I just have to join the computers on domain or create mailboxes for them and have them change the password through OWA?

Cheers,
Mikko