Account lockouts not shows to users

Hi all –
We have mostly Win2K Pro desktops connecting to an NT 4 domain –
We’re having a continual problem in that when a user locks out their domain account, they aren’t shown any indication that this has happened – the workstation lets them log on as though nothing is wrong, not sending them any messages about “your account has been locked out” or anything like that.
They users are of course not allowed access to any network resouces, which the users then see as a network or connectivity problem because they were allowed to log on just fine.
Is there anything we can tweak to tell Win2k that if a user is locked out, don’t let them log on for heaven’s sake??