See if How to create internal account and reset password in AD/Internal Hybrid resources - #2 by Transistor helps.