challenge response for forgotten passwords

Environment:
NW6.5 OES SP2 servers
Windows 2000/XP Workstations with Client 32 4.91 sp3
eDirectory 8.7.3.9

We are a K-12 environment with thousands of users. Password management has
become an issue with people forgetting them.

I understand there is the Challenge Response option, as seen in iManager and
that the requirend products are installed on the servers (NMAS?). My
questions are:


1. Are there any additional products that need to be installed on the
server? While searchng for my answers, I keep coming across the IDM
product, but I don't think this is needed..

2. Is there any configuration required on the servers for NMAS?

3. I believe NMAS needs to be install on the clients?

4. I have found a Cool Solutions guide that talks about setting up Challenge
Sets, Policies, etc. See it at
http://www.novell.com/coolsolutions/feature/16001.html . Is this an accurate
guide for what I need?

5. Any notes or best practices on setting up the forgotten passwords?

Thanks.