Error Message:

This operation is only allowed for the Primary Domain Controller of the domain.

Explanation:

For instance, the password associated with a user cannot be changed at a domain server that is in a backup, rather than primary, role.

User Action:

Change the domain server role, or change domain servers, and retry the operation.