Azure AD Writeback Problem Event ID: 33007 (The password given does not specify the user's current password)

Hi

A Microsoft 365 Business setup and Azure AD P1 subscription. If i set at the Microsoft 365 portal a new password to the user and "make this user change their password when they first sign in" it dosen't work though at the admin portal it seems to work. For example, if the user (off shore worker) the goes to http://mail.office365 (or https://portal.office.com) and tryes to login he/she will get "Update your password" window  (old password and the fields where to put the new one) he will get an error:

"Try again—that's not your current password."

Attached my Azure AD Connect Settings

At the OnPremises AD server's Event viewer I can see this:

Log Name:      Application
Source:        PasswordResetService
Date:          3.4.2018 9.37.06
Event ID:      33007
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      MyDC-01.MyDomain.local
Description:
TrackingId: zzzzzzzzzzzz-38da-499c-994c-zzzzzzzzzzzz, Reason: Synchronization Engine returned an error hr=8023061A, message=The password given does not specify the user's current password., Context: cloudAnchor: User_zzzzzzzzzzz-99fd-428e-97e8-zzzzzzzzz, SourceAnchorValue: zzzzzzzzzzzzzzzzvbwnpIw==, UserPrincipalName: User.Test@MyDomain.fi, Details: Microsoft.CredentialManagement.OnPremisesPasswordReset.Shared.PasswordResetException: Synchronization Engine returned an error hr=8023061A, message=The password given does not specify the user's current password.
Azure-AD-Connect-Settings.JPG