Minimum permissions required to reset passwords in the target AD domain (4322364)

What are the minimum permissions required for the Quick Connect service account to be able to reset user passwords in the target Active Directory domain?

In the target Active Directory domain, grant permissions to the Quick Connect service account or to the account selected to access the target domain as follows.

1. Launch Active Directory Users and Computers snapin and connect to the target Active Directory domain.
2. Locate the OU where you want to grant the permissions
3. Right-cilck the OU and select Properties
4. In the Properties dialog, select the Security tab and click Advanced
5. In the Advanced Secuirty Settings dialog, click Add
6. Select the Quick Connect service account and click OK
7. In the Permission Entry dialog, select Apply to: Descendant User objects
8. On the same Object tab,  scroll the list of available permissions down to the bottom
9. Select Change Password
10. Select Reset Password
11. Without closing the dialog, select the Properties tab
12. Select Read userAccountControl
13. Select Write userAccountControl
14. Save the changes by clicking OK as required