И это всё МОЁ
Fixes an issue in which the badpwdcount attribute on the primary domain controller isn't reset when you use NTLM authentication to log on to Windows Server 2012 R2.