There is no need for to connect to the server directly via NT networking. All the user needs is a standard web browser and a HTTP connection to the NT web server. This connection can also be via a proxy server.
System administrators can set up a password change dialog, a simple HTML form. No special magic needed. Fully customizable (e. g. include your company logo).