The client, a normal user, has to be able to reset multiple passwords at once. Around 30 in one go. This would call for powershell or something along these lines, but for AD and Powershell one needs to be domain administrator.
My solution would be to make a service that runs on the AD server and take connections from a program. The service would then do the AD changes.
So far so good, I would just like to hear some other thoughts on this problem. Because I sure can't be the only one with it