How does the system enforce limits on invalid logon attempts, and what actions are taken when the established limit is exceeded?

The account locks from sign-in attempts for one minute after 10 failed attempts. The account locks again after each subsequent failed sign-in attempt, with lockout time growing after each subsequent attempt.