given the vast amount of ip that pfe needs to build for service manager, this will be a very busy fiscal year. not my content but a great link for a great solution to handle ad password resets - http://contoso.se/blog/?p=1605