User Policy; Event Logging settings for failed logins were being ignored

The following Event Logging User Policy settings were being ignored:

• Login Failed
• Login Lockout

Failed logins were always being audited with a severity of "1" regardless of the User Policy setting. Additionally, "Login Lockout" was never used, and therefore this severity did not do anything.

The "Login Failed" User Policy Severity is now respected when a login fails but is not locked out. At the point a User becomes locked out, the "Login Lockout" User Policy Severity is respected.