User has new password in AD, but GlobalProtect still authenticates with the old password (new password fails).
When our users change their AD password, they immediately will lock & unlock Windows to make sure the new password took, and that what they think they changed it to, is exactly what they changed it to. They also have been told to sign out of GlobalP
...