Users can change their own password using the adpasswd command. See page 54 of the Express admin guide
http://www.centrify.com/downloads/products/documentation/suite2011/ga/centrify-dc-directcontrol-expr...
The adpasswd command can also be used to change the password of another Active Directory user if you provide the user name and password of an administrative account with the authority to change another user’s password.
For more information about using adpasswd, see the adpasswd man page or “Using adpasswd” on page 108 of the Express admin guide.
No doubt there is a way to script adpasswd if you want ...
You can always change the password of an AD user within ADUC, assuming you have the proper permissions.
Hope that helps.
Tom
