Hi Madan
Isn't this something you could quickly test yourself and report back to the community? I would assume that it is System Admin Lock. However, why not set up four users -
- one user with zero lock
- one with incorrect password (128)
- one with system admin lock (64)
- one with combination (128 +64)
Ensure they all have the same roles to cause the same risk. Run your report and see what results come up.
Questions like these are great but it's also an opportunity for you to verify yourself instead of being told.
Also, I think there are some configuration parameters (probably more batch risk analysis) that allows you to exclude certain user scenarios.
Regards
Colleen