Q: We use TrueCrypt in a corporate environment. Is there a way for an administrator to reset a password when a user forgets it?
A: There is no "back door" implemented in TrueCrypt. However, there is a way to "reset" a TrueCrypt volume password. After you create a volume, backup its header (select Tools -> Backup Volume Header) before you allow a non-admin user to use the volume. Note that the volume header (which is encrypted with a header key derived from a password) contains the master key using which the volume is encrypted. Then ask the user to choose a password, and set it for him or her (Volumes -> Change Volume Password). Then you can allow the user to use the volume and to change the volume password to any password he or she likes at any time. In case he or she forgets his or her password, you can reset the volume password to your admin password by restoring the volume header backup (Tools -> Restore Volume Header).
