I got an email saying my password would expire in a few days, so I clicked on the link in the email and updated it.  After doing so, I realized I could no longer log in to my computer, accept by disconnecting from the network and using my old password.  I immediately opened a support ticket. The next day, I was working from home, and someone from IT finally contacted me over Skype messenger.  **He asked me what my new password was.**  I was desperate to get the problem fixed since I wasn't able to connect to certain essential services whose credentials were linked to my Windows login, so I sent it to him despite my reservations.

My questions are:

1. Is this an acceptable practice? 
2. How should I have handled this situation? 
3. Aside from resetting my password again, are there any other steps I should take?

I care a great deal about security and I know that the upper management at my company does as well.