Fix account lockout threshold sort logic

account lockout threshold of 0 = never lock out; fix logic introduced by sorting by that field. ref dafthack#19 (comment)

private/Get-DomainPasswordPolicy.ps1

@@ -92,7 +92,7 @@ function Get-DomainPasswordPolicy {
 
         # Generate a userlist from the domain
         # Selecting the lowest account lockout threshold in the domain to avoid locking out any accounts.
-        [int]$SmallestLockoutThreshold = $AccountLockoutThresholds | Sort-Object | Select-Object -First 1
+        [int]$SmallestLockoutThreshold = $AccountLockoutThresholds -replace 0, 9999 | Sort-Object | Select-Object -First 1
 
         $AcctLockoutThreshold = @{Name = 'Account Lockout Threshold (Invalid logon attempts)'; Expression = { $SmallestLockoutThreshold } }