I'm not sure, but couldn't you create a group on your NT server and give that group appropriate permissions on user manger (policies) and then add your users to that group ... ??