Running a 2008 R2 Active Directory server. Users are allowed 5 bad login attempts before their account is locked.
One user for some reason has a login threshold of 1 (which I've verified by logging into our website using their name).
For the last week or so, every time they mistype their password even once, they come to me and I uncheck "Account is locked out" in the users properties.
I'm quite new to AD, and I can't find any microsoft documentation of why one users threshold is different than everyone else's.
Can someone explain to me why this is the case, and how to change their threshold back to 5?