Is this from trying to create/run reports within OCUM? If so, do they ever succeed? An account can get locked out from trying to login to OCUM with a wrong AD password, but if your user gets locked out after doing something successfully, then I don't think that's ever happened to us.