We have a large group of users that we provide webmail accounts for. Each user has an active directory account and I need to provide them with a method for changing their passwords in case they forget them. We have personally identifiable information for each user that we will use to verify their identity when performing a password reset. I'm looking for some kind of tool that can be run from an ASP script that would be able to reset user passwords.
I'm a network guy, and only a marginally proficient coder, so a component with easy to use methods would be ideal. I want to write the complete front end for this app myself, all I need this component to do is give me the ability to reset A/D account passwords. I assume the IUSR_SERVERNAME account would need to be given permissions to A/D to perform the password resets. Is there a more secure way of doing this (I.E. specifying credentials in the script itself)?