How to lock Windows account (reset login cache)?

Question

Active Directory

Situation:
1. blocking the user account:

dsmod user "CN=Иванов Иван Иванович,OU=DepDirectors,OU=Contoso,DC=Contoso,DC=lan" -disabled yes

2. kick the user out of the system:

start psexec64.exe -accepteula \\WSIVANOV -i -s %windir%\system32\rundll32.exe user32.dll,LockWorkStation

after that the user can still log in! but only the first time!
the second time the system will already write to him that the account is blocked.
How to make it so that the user can not log in even 1 time after the account is locked? (maybe credentials are cached somehow?)

Answer 1

This is?

Answer 2

gpupdate

Answer 3

Oh gods.... Well, block the user in OU, make him a logof, make gpupdate on AD (just in case, although this is not necessary in this scenario) and that's it, man))) And how you do it is some kind of rubbish .....