Editor: This requires at least account OperaTor on Domains and administrator on member and standalone machines to set a password. If changing a password, you just need to know the old password and if this is in AD, have the permission to change the password. This is standard permissioning by default but if someone locked down, it could disallow a change even if you have the old password.