Allow Offline Login when User Account is Locked Out
Use this group policy to specify whether to allow a user to log in to a machine that is in disconnected mode if their account is locked.
If this policy is set to Disabled, or Not configured, by default, users with locked accounts cannot access a disconnected machine.
This group policy modifies the secedit.system.access.lockout.allowofflinelogin
parameter in the agent configuration file.