SandyB, check 2 things:
1) Verify that no servives are running on the host, under the context of the domainadmin - if any are, this should be changed to use a different user account, to prevent this kind of thing happening (create a dedicated Service account)
2) Check that your DB does not use Domain admin for access.
Good luck - please post back with your resolution
Incidetally, Microsoft has a tool called EventCombMT that will allow you to query your DCs / event logs for event lockout events