These numbers are roughly what we see as well. Normal use w/screen lock
gives you a couple, upgrades give you five. Not sure what resets it. It
is more than just a successful auth at the screen that can do it as we
have seen it go back to 0 with no u...
We found the issue wasn't necessarily related to MDM, but any account
lock out policy (MDM applied profile, manually installed profile, and I
assume AD enforced profile though we can't test the latter).
I was surprised at how infrequent this seems to be mentioned as well. I
did see some other mention of it on the MacAdmins slack channel in
#sierra (see discussion on September 28). Also, our symptoms were
slightly different than most people here in t...
