Re: RSAT-tastic
Pfft.
NET USER Bob /Domain *
<enter password twice>
Or if you insist on PSH:
Set-ADAccountPassword -Id Bob
<enter password twice>
And the way you get first line to work with it is you provide processes and/or your own toolset (e.g. a central website that audits and logs resets, runs PSH in the background, and does all the other first level stuff).
You could run up a .HTA app with jQueryUI in a couple of days that does this sort of thing - I know, I've done it recently to provide a front-end for USMT plus data backup and restore, plus password resets and computer moves.