Facing the same issue in my company environment as well. Password need
to be changed from the Mac side only. Not using the portal. If any user
has changed their password from the portal, then you need to change the
AD password to the old one and then...
A cyber security practitioner. Working as the L3 admin for Jamf for Virtusa.