Account Lockout

User accounts are being locked out every second in our domain.The Group policy has not been changed recently,I suspect the password policy as the minimum password age is 0, and microsoft recommends it to be atleast 2.
We running windows 2000 advaced server on two Domain Controllers. all roles global catalog, rid,pdc and infrastructure roles are assigned to one Domain controller.

Please advice with any solutions.