When a machine joins a domain, the interactive logon screen (Winlogon) may ignore BIOS/UEFI NumLock state and instead follow Group Policy or registry defaults. This affects password entry if your credentials rely on the number pad. Below, I will show you how to set NumLock to be ON at logon (Domain or Not) to avoid locking your account.
Set-ItemProperty -Path ‘HKU\.DEFAULT\Control Panel\Keyboard’ -Name ‘InitialKeyboardIndicators’ -Value ‘2’
0 = NumLock OFF, CapsLock OFF, ScrollLock OFF
1 = CapsLock ON, NumLock OFF, ScrollLock OFF
2 = NumLock ON, CapsLock OFF, ScrollLock OFF
3 = CapsLock ON, NumLock ON
2147483648 = NumLock ON (some domain setups prefer this special bitmask for compatibility and to to persist state)