Give a user access to reset password and manage accounts.
WE have SBS 2011 with about 20 users. The manger wants to be able to change/reset someone's password if the IT guy is not around. Is there anyway to do that with the least amount of access/right? Can I somehow have him to that by installing AD users and domains on his XP computer and only limite his access to the OU that the suers are in?