The policy "Restrict login attempts before lockout" should allow values between 2 - 30 (inclusive). Currently, it only allows values between 3 - 8 (inclusive).
Our corporate policy specifies a number of consecutive failed authentication attempts permitted before lockout to a value outside of the 3 - 8 range. The current range is unnecessarily narrow and does not allow for proper adherence to corporate policy.
