Answer
This lockout happens at the WebLogic security realm level, due to the repeated failed AD-authentication attempts being tracked there — rather than restarting the whole middleware, use the WebLogic Admin Console directly: go to Security (under the domain root), choose Unlock User, enter the specific user ID, and save. This clears the lockout within WebLogic's own security realm without needing a full middleware restart.