My current customer's environment is (unfortunately) a mixed one with eDirectory and AD.

User accounts have been created in AD with the same names (but a different password) as eDirectory. Users' workstations have been added to the domain, but they aren't logging into the domain yet.

If a user logs in to Novell and selects the local workstation (instead of the domain) and continue working merrily away, after a period of time (less than 40 minutes) their AD account gets locked. They are not running any applications that point to Windows boxes, nor are they opening Windows Explorer and trying to get to one.

We recently disabled DLU in ZENworks (management decision).

Even completely ignoring any Windows servers' resources, their accounts lock. I'm wondering if ZEN Workstation Manager or Novell client is somehow trying to log them into AD and failing.

Any ideas?