Correct password rejected

[Jonas-li]

Hello together

We have since a few months a strange problem on a few managed Macs, which we manage with Jamf Pro:

Sometimes the login is denied with a correctly entered password. The users are sure that they enter the correct password (stored in PW-Safe).

It should also be said that we have a relatively strict password policy.

Resetting is now only possible using the recovery key from FileVault.

Have you had similar experiences? What could be the problem?

Translated with www.DeepL.com/Translator (free version)

[Timmm]

We've had the same problem, in our situation it had to do with the setting "Maximum Number of Failed Attempts" in the passcode payload. The counter wouldn't always reset after entering the correct password, so after a while the machine would lock and the correct password wouldn't work anymore. There was no other feedback then "Incorrect  password". After removing this setting (+- 6 months ago) the issue disappeared completely.