Reset password failed and access denied

A common case in AD management is to set up a help desk group to handle simple management tasks, such as reset password. After you delegate the control of an OU to your help desk group and the user in help desk group failed to reset the password of the user in the OU, you probably need to check whether the "Include inheritable permissions from this object's parent" is checked or not for the OU user.