The user has entered the password incorrectly too many times

As in this case resetting the password is unnecessary, the Challenge/Response procedure enables the user to log on at the Power-on Authentication. The user can then enter the correct password at Windows level and use the endpoint again.