how can i allow a user to reset passwords



how cna i allow a user to reset passwords for other users on AD? i have a
server and a child server im ok with him having access to the child server if
need be but i would like to make sure he can not log onto the parent server.
.