Hi Tanyc
It is not a normal behavior. Could you please check to be sure whether user has changed the password from the machine itself or they have changed the password from ADUC? Is the user registered on multiple machines? Has user changed the password from another registered computer? Please let me know if you have any questions.
Regards
Nitin L