Disabled means an account is turned off either by an admin or automatically, often needing action to fix. Locked means it's suspended automatically because of too many failed login attempts.