When admins reset an AD password, the client certificate does not update. Therefore the users have to still use the old password. Is there a way to automatically update the client certificate when this situation occurs?

I'm trying to give an account POA on a laptop here, but the account is listed as disabled. The account works fine on computers without SafeGuard installed, but every computer with SafeGuard that I attempt to log in immediately locks up and logs me out…