Similar question: Active Directory and VMware
You cannot easily configure these types of exceptions in AD. See my answer to your other question. The best thing you can do is take infected machines offline ASAP so that the account lockouts do not occur.
Register Hereor login if you are already a member