Greg, Jimmy - Thank you.
Greg -- I'll check out the sources you mentioned -- thanks, that's very helpful.
Jimmy - yeah, we do have an AD password policy. To my knowledge, the users do NOT get locked out of Lawson -- this simply notice they can't log into their computers (or use network resources, etc.) because their AD password is locked.
Seems like this
is a likely culprit -- I will continue on toward that point of investigation -- thanks again, guys.