I've seen this before on machines that were previously connected to via RDP. RDP will break Login Agent. You either need another way of interacting with the system remotely (IE TeamViewer, VNC, etc), or you need to have a batch file that runs on every RDP disconnect to have tsdiscon unlock the system to the desktop session.