Back to the Loopback: Troubleshooting Group Policy loopback processing, Part 2

Hi NXU27 thanks for posting that article, a good read.

One thing worth noting, when you mention "RSoP", if you're meaning the graphical wizard in GPMC, I've read previously that this has been deprecated in favour of the command line 'gpresult' client.  I haven't been able to find an authoritative source on docs, but this serverfault question mentions it, and a search brings up similiar non-Microsoft results: https://serverfault.com/questions/693391/windows-8-1-locks-account-after-3-invalid-attempts-even-if-gp-is-not-defined/693396#693396

It would be interesting to hear if using gpresult correctly evaluates the policy settings for your example.  By the way - gpresult should be run from an elevated session in order to process all policies.