How to change a domain password from a n

Ok, I’m stupid. Anyone know how a user can change their domain account password from a machine that is not a member of the domain?

User manager for domains requires you to be in the domain.

Net commands require you to be in the domain.

Seems like there ought to be a way to do this.