I have Windows 2003 AD and have the account lockout threshold set on the Default Domain Policy. I have an account in an OU that I would like to NEVER get locked out. Is there any way to make the Default Domain Policy not effect this user? I have tried to enable the block policy inheritance option, but that seems to have no effect. Any ideas?