Your question isn't very clear, what account is locked out? Your user account, or your computer account? Have you successfully joined the Windows 7 computer to the 2k3 domain and thereby established a computer account? Is the Win7 machine getting the correct information as to the primary DNS resolver? have you attempted to log onto the Win7 machine using domain admin account? If the answere to all the above is affirmative, then remove the Win 7 machine from the domain, and delete the computer account from AD users and computers and rejoin and see if that helps at all. If you can, please help me understand, what your question actually is.