When an onpremis user in your environment cannot change his password and you see in the SSPR audit logs OnPremisesAdminActionRequired as failure
Category: AD Connect
The sync agent tells you that his status is unmonitored. You can fix this easily.