If you update a non-master directory server with password policy information, the information is not replicated to all other servers. This information includes account lockouts.
Workaround: Manage password policy information manually on each server.