It is possible with Symantec Endpoint Encryption 11.1.0 and newer with the Password Reset Feature. However, it does not work perfectly for every scenario.
Please read the following excerpt from the SEE 11.1.1 Release notes below :
Windows Password Reset feature expanded
The Windows Password Reset feature that was introduced in Symantec Endpoint Encryption 11.1.0 is now expanded to enable users to reset their Microsoft Windows password by themselves, after regaining access to the computers using the Help Desk Recovery feature. Note: A network connection is required to be able to change the Windows password using this feature. In the absence of a network connection, users are logged on to Microsoft Windows directly and can manually change their Windows password later. Policy administrators can use the Windows Password Reset - Settings policy screen to enable the Windows Password Reset feature using either Drive Encryption Self-Recovery or Help Desk Recovery, or both methods. This Windows Password Reset feature is configurable as an install-time policy setting while creating the Windows Password Reset Utility installation package, as a native policy setting, or as a GPO policy setting.
Cheers,
Phillip