You could do that with FormIt and a FormIt postHook (to activate the users), but I'd probably just write a snippet to process a regular HTML form.
Actually, I'd probably customize the Manager for the Secretary so everything but the Manage Users page was hidden and send the Secretary directly to it on Login.
Thanks for the prompt feedback - I'll have a dig around your suggestions to see what I can work up.
Thanks