Error Message:
This operation is only allowed for the Primary Domain Controller of the domain.
Explanation:
For instance, the password associated with a user cannot be changed at a domain server that is in a backup, rather than primary, role.
User Action:
Change the domain server role, or change domain servers, and retry the operation.