I am looking for a way to stop account locks from getting cached on laptops. Here is an example for clarification:
We had a user who was working remotely over VPN. While working remotely, he accidentally locked himself out of his account by entering incorrect credentials too many times. Because he was on the VPN when this happened, the account lock moved onto his laptop. When he disconnected from the VPN and logged out of his computer, the lockout was cached. He then could not log into his computer until it was physically connected to our network inside of our office.
We are looking for a preventive measure that would prevent this from happening as we have a lot of people traveling who cannot always make it to the office the next day to hookup to the network and unlock the computer.