Change AD password from webserver by LDAP connection

See more:

active-directory

I'm in need to supply users with an ability to change their password via webserver. The password is maintained by Active Directory and the password change shall be done by the users credentials without any administrative authorizations.
This is easy for regular passwords:
- bind with users current password
- change the password then

But when the password is expired or initial the bind fails and I see nothing what can be done about this. The only solution I see is to reset the "pwdLasSet"-attribute - but this would require admistrator priviledges.

Until IIS 6.0 Microsoft offered a IISADMPWD-feature to do the password change, but currently I don't see nothing else.

I hope I could make clear: I need either
- a solution to do the password change via LDAPS connection by myself
- or a hint what to do else

Any help appreciated,
Ulrich