find pdc emulator. from a command prompt, run:
netdom query fsmo
run this on the pdc emulator in powershell as admin to find lockout events and identify which computer caused the lockout:
get-winevent -filterhashtable @{logname='security'; id=4740} | Where-Object -Property Message -Match 'username' | fl
Run this to verify if user account is currently locked out: (requires AD modules in powershell)
Get-ADUser -Identity 'username' -Properties LockedOut | Select-Object Name,Lockedout
Run this to unlock the account from powershell:
Unlock-ADAccount -Identity 'username'