ONLY manage users in server 2008

Have a Server 2008 AD at a rural school. Need one of the teachers to be able to change students (AD users) passwords, but not be a domain admin. Any help will be apreciated.
Who is Participating?
abhijitwaikarConnect With a Mentor Commented:
Hello GCITech,

You can use the delegation of control wizard to delegate administrative control of active directory objects, such as organizational units. By using the wizard, you can delegate common administrative tasks, such as creating, deleting, and managing user accounts.

To delegate common administrative tasks for an organizational unit, perform the following steps:

Start the delegation of control wizard by performing the following steps:
Open Active Directory Users and Computers->double click the domain node->right click the organizational unit-> click delegate control, and click next->Select the users or group to which you want to delegate common administrative tasks.
To do so, perform the following steps:
On the Users or Groups page, click Add.
In the select Users, computers or Groups, write the names of the users and groups to which you have to delegate control of the organizational unit, click OK. And click next.
Assign common tasks to delegate.
To do so perform the following common tasks.
On the tasks to delegate page, click delegate the following common tasks-> On the tasks to delegate page, select the tasks you want (In your case select Reset user passwords) to delegate, and click OK.
Click Finish.
Pete LongTechnical ConsultantCommented:
not sure if this still works with 2008 but give it a try
Pete LongTechnical ConsultantCommented:
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

GCITechAuthor Commented:
Looks like the solution I need. I am at this school on Tuesdays and Thursdays, so will try to implement it this afternoon. I will report back. Thanks for the input.
GCITechAuthor Commented:
The delegate administrative task wizard worked fine, however, the new "mini admins", are not able to log into the server at the console (I think that is good). do they change the user's password?  I apologize, if I have missed something very basic, but here i where I am at. It looks to me like they should be able to do it from any workstation. If the user attributes are set to where the user cannot change his password, does that remove the option at the log in screen that the mini-admin will use?
All Courses

From novice to tech pro — start learning today.