The process for allowing the password reset is using "Delegation of
Control" and its wizard.
The password you set the password to will be in the password history of
the user, so the user cannot set the password to that value again. For
the reset, however, the password history is not checked so you can reset
a password to a standard password over and over again.