this is clear evidence that your password security system has failed. Do not blame or punish the poor user, it is not his or her fault. The fault is with stupid, thoughtless policies enacted by management.
In my previous company, we had impossibly complicated passwords (8 or more characters alpha numeric passwords, that kept changing every 3 months). Not only that, we had at least 25 different passwords to "remember" at any one time, in order to access necessary resources such as the intranet, salesforce.com, certain company databases, e-trade, etc, etc. Not surprisingly, most employees (and me among them, although I know better)used post it notes or other low tech means to "remember" all these crazy passwords. Given this situation, why would you punish the poor user, unless you are a sadist who enjoys exercising the little power you have over the user?
Place the blame where it really belongs, on ridiculous management policies that frustrate good employees and do not let people access the systems they need to do their work, and confront the management idiots that think these draconian passwords are a great idea.
BTW, employees do not take kindly to people like you that add to their frustration - did you ever wonder why IT is so busy responding to "unnecessary" calls, that have you running all the time and cause you to feel superior and complain about the "stupid users"? Employees strike back in the only way they can......