We had a similar situation, but in our case the culprit was our single sign on application, Imprivata. For some reason, when she changed her password, Imprivata did not update and it was constantly injecting her old password. Once we manually updated Imprivata, no more problems! Good luck with your ...