Help with W2K Professional Clients in a WINNT Domain.

I run Windows NT with mostly Windows 95/98 clients. With Win95/98 these client PC's were configured to be part of a workgroup (dept name)and log on to an NT Domain. This way when you browse the Network, you see each department in a seperate group, and this way it's easy for PC's to be found on the network.

Now I've started intoducing W2K prof. PC's to the network and they can either be part of a workgroup or Domain, not both. In order to keep my current design I put the W2K PC's in workgroups. The problem with this however, is finding a way to synchronize the local passwords with the NT server passwords. Each time a user changes their password, I have to manually make the change on the server. If this is not done the user loses access to the NT Servers that run services like Mail. I am wondering, is there any way or tool that can be uses to synchronize these passwords, other than me adding all w2k computers to the domain and having one huge list of pc's displayed in network neighbourhood? I know that w2k server uses Active Directory to place PC's in groups but I'm not running a W2k server.

Thanks in advance.