In this blog post from the Microsoft Directory Service Team over on TechNet, David Beach attempts to demystify the account lockout UI behavior in cases where the domain controllers don’t reflect the locked-out status of accounts. Check it out here:
http://blogs.technet.com/b/askds/archive/2013/10/01/locked-or-not-demystifying-the-ui-behavior-for-account-lockouts.aspx