In EE2, you have to be a Super Admin to change a user's password without knowing their old password in the CP. This is very annoying when you setup up 'Client Admin' member groups as they expect to be able to do such a task for unlocked member groups.
In EE1, there was an add-on called NSM Member Password Security that allowed you to specify member groups that could reset the password without knowing the old one (something that should be part of the standard member permissions in EE, IMO).
But I can't see any such add-ons for EE2. Does anyone have a workaround for this (without giving them Super Admin access)? Or how do you deal with 'Client Admin' member groups that have permission to add/delete member accounts, but can't reset someone's password for them without knowing the old one? Use the forgot password form instead?