1. If a user is locked out, no changes to their user account will be accepted until that lockout period of 20 minutes expires as a safety precaution.
2. Passwords need to be at least 7 characters long.
3. Users cannot reuse one of their previous 5 passwords.
4. Double check that the CAPS lock or NUM lock settings on their keyboard are correct.
The default coordinator interface unfortunately doesn't always aware you of these rules, but when a user changes their own password from the profile screen (clicking their name in the top right corner), all validation issues are conveyed.