password keeps requiring reset

So whenever someone logs in to a mac that is hooked up to Active Directory, it will require them to change their password every time they log in. I have been beating my head around this for about 2 weeks a now and I am out of ideas…