Achieving self service password reset through helpdesk only and not by users- FIM 2010 R2

I want to achieve the following:

1. User sends request for password reset using a custom form resource
2. The helpdesk resets the user's password and the new password sent to the user by mail
3. The manager gets notified that the user's password was reset

Please share your success stories on something similar or the same. How do you achieve the above on the FIM portal? Does FIM generate passwords that could also simplify the helpdesk's work of generating these passwords for user? If yes, how can it also be incorporated?

The normal SSPR works perfectly fine but it is a requirement that users do not get to set passwords for themselves but through the helpdesk. I'll appreciate your help on this.