If you want to find it out if a user is locked out you can just search for lockouttime > 0 in your filter. That should return only those users who are locked out. No need to search for them all then step through each object.

"(&(objectCategory=person)(objectClass=user)(lockouttime>0))"

You can also filter out disabled accounts as smirnov points out