With the default installation of XenApp/Desktop 7.5+ by default, users cannot change their own passwords via Receiver for Web.
The StoreFront console provides an administrator with three options for managing passwords;
1. Never (enabled by default)
2. When expired (users will only be prompted when their password has expired)
3. At any time (users can freely change their password at any time)