In an earlier post a script was published which automatically sends users a warning message/mail when their password is about to expire.
A more simple approach would be to scan the AD for disabled and locked accounts manually or at a set interval, say each morning.
Our Active directory is, like with many other, the source of user information. You should think of address information, function/department. Every now and then the account information is verified and when in doubt, discussed. Having the information in a human readable form, such as an Excel sheet, makes it so much easier. The script below will export all user info from the Active Directory to an Excel sheet. Just run from a computer connected to the your domain with a user that is allowed to query the AD and watch the magic (gives me a smile every time is see it run).