About 30 minutes ago all of our accounts were locked out of active directory. We do have a group policy set to lockout an account after 3 attempts and to reset the account after 10 minutes.

The Active Directory Module for Windows PowerShell, which is included with Windows Server 2008 R2, can be used to administer Active Directory Domain Services (AD DS) objects, including user accounts.

If I unlock the account, it will happen again the instant he attempts to connect to a drive. This only happens over VPN; on days he is working in office, he is able to work without issue.