If you disable an account outside of Directory and Resource Administrator, unlocking an account via Secure Password Administrator enables the account.
Secure Password Administrator (SPA) version 1.0 Hotfix NETIQKB41466 ensures a user account that has been disabled through other tools (such as Active Directory Users and Computers) remains disabled when you use Secure Password Administrator to reset the account password or unlock the account.
To install this hotfix, run the SPA10000_Hotfix41466.exe file on your Secure Password Administrator Web server computer.
This hotfix modifies the SpaCommon.dll file on the Secure Password Administrator Web server computer. By default, this file is located in the Program Files\NetIQ\SPA folder.
For more information, contact NetIQ Technical Support at https://www.netiq.com/support/contactinfo.asp.