As you have separate visualforce page for managing users, you should be able to achive this, by moving the logic for manage users (deactive, create, edit and reset passwords) to a separate 'Without Sharing' apex classes .
vivekvismayam
- 191
- 8