Question : Allowing the helpdesk to only reset and change passwords

Hi all,

I would like to find out if I could setup an OU and a policy that would allow the helpdesk to only reset and change passwords on the domain? I know I could add them to the Account Operators group but this would allow them to much access.

Any help would be nice

Thanks

Answer : Allowing the helpdesk to only reset and change passwords

just use delegation of authority wizard from ADUC