Hello Jean
You can change the password directly to the account on the endpoint "AD" or by synchronization, for example invoking task "Password Reset".
Either way, at final you will need a secure connection "SSL" with AD and a service account possessing privileges to reset the password.
Any curiosity or need to know something deeper, do not stop asking. What seems simple is not silly.
Efrén