Win2k Domain account lockouts

I have users with windows 2000 on there work stations. When they connect through VPN and Entrust they are not being warned that there network password needs to be changed. As a result the account is being locked out and the user can no longer log onto their PC. Does anyone know how to unlock the domain account on the local PC without attaching to the network.