Let system administrators reset another user's local password from the settings UI, revoke all active sessions, and record the action in the audit log.
wizardchen