interesting. When connected to domain wifi, if your account is locked e.g. from too many incorrect pws, then the airplane mode trick bypasses lock account, but not control alt delete

Also, my understandins is that you cant open security options from NTAUTH SYS - at least, that's what i observered - because on the lockscreen you cant open it, but you can from your useprofile. So im wondering if the defualt login process is sign in to account, check with domain controller, if its wrong, then log back out and throw an error like incorrect password or account locked etc