Since we are dealing with windows XP users here, you can use the built in ADSI tool set.

code:
$user = getobject("WinNT://@domain/@userid")
$user.changepassword($oldpassword, $newpassword)

you will have to prompt your users for their old and new password's....