WMI scripting with Active Directory

I have been tasked with finding a way to enable helpdesk users to have a
reduced administration role (changing passwords, unlocking accounts, etc) and
I think that I can possibly use WMI Scripting to do this.

I can't find any information on the forum about this specifically, but does
anyone know if there is a way to use WMI scripting to give a group certain
reduced rights.

I know that you could create a web app that calls each script, but I'm
wondering if there's another way.
.