I'm attempting to set a users password via LDAP, however the LDAP binding user I specify never has permission to set the password unless I make them a member of the Domain Administrators group. I've right-clicked the domain in ADUC and done the delegate control wizard and have tried granting my bind user "reset user passwords and force password change at next logon" as well as a custom task granting Full Control to all user objects, however the bind user is still unable to set the password until they've been added to the Domain Admins group.
Any help would be appreciated. Thanks!