The IIS's security verification mechanism is well done, we can use ASP's security verification to modify the Windows 2000 administrator password.
When someone logs in to the site, use the login_user in the ServerVariables collection to capture the login account, the premise is that the IIS must be closed to allow anonymous login to this option, and then modify the password through the ADSI in the ChangePwd.asp file.
The following is the program:
Changepwd.htm