From ChatGPT: "Yes, it's possible to delegate password management rights using Active Directory. You can grant the "Reset Password" permission to the teachers' group on the students' group, allowing them to change passwords without granting other admin privileges. This delegation can be managed through Active Directory's Access Control Lists (ACLs) or using Group Policy settings".
So if you have an AD network environment, create a Security Group with those permissions, or add permissions to an existing group, put all the teachers/whoever in that group and they should be able to change passwords for students and nothing else.