vb com object question

Hi,

I'd like to create user accounts in a win2k Active directory domain by using
ASP and a COM object. The ASP page would call the COM object and create the
accounts in the win2k domain. The web server is not a member of the win2k
domain. How do I allow the COM object admin permissions in the win2k domain
to create the accounts? Do I have to make the web server a member of the
win2k domain? Is this possible or are there better ways to allow account
creation through a web
server?

Thanks,
Aaron