In a corporation, this is totally okay as long as the reset password is safe or the account is locked from external access until the password has been changed.

In a corporation, this is totally okay as long as the reset password is safe or the account is locked from external access until the password has been changed. The employee should of course change their password and that should be enforced policy, the admin shouldn't know user passwords. Tokens work too but it's a bit of an overhead, especially in smaller SMB where the admin is probably just across the corridor or atleast in the same building.