Well, it seems as if we're stumbled onto something here.
I might be wrong......

Issue is; one client has some users on the road for longer periods of
time. These users while using GW Mobility, will off course NOT get any
"grace logins" but at the same time, it seems that these do get
consumed by using Mobility....

So, users not in the office for longer periods of time end up beeing
locked out because of this.

Again, I might be wrong, maybe it's just been coincidences, maybe to
gw/mobility login over LDAP isn't a login that should affect