In Active Directory, does a user account get locked out domain-wide or at the server level?

Solution 1:

Domain account lockouts are not per-member. They are domain-wide.

This user probably hasn't been added to the local administrators group (or the Remote Desktop Users group) on this particular server. The error message that you're describing is not the one that you would see if the account was locked.