I've just built a new 2008 R2 box and it is a domain controller and also has the terminal services role installed.
I have three accounts, the default administrator account, another account called admin1 with domain admin rights and a user1 account.
All three accounts used to work no problems but now it seems my user1 account has been locked out. The error message I am now getting is in the image I attached.
The account is not disabled and I have no idea why this is happening when it used to work fine.