[question] What architecture/process do you use to update passwords in your environment?

Can you describe the process that you use in your corporate environment to update passwords?

I am looking for different models to build and test. And wanting to learn best practices and how that changes as the size of your environment scales up.