One of the things I really hate about the macOS login UX is that it doesn't give any information about what's going on. For example when an AD account is locke

One of the things I really hate about the macOS login UX is that it doesn't give any information about what's going on. For example when an AD account is locked or your account is valid but you don't have access to log in to that particular machine, Windows will tell you after your enter the username and password successfully. macOS will just shake the username field just as if you mistyped your username or password. I know you can't tell which one is wrong (as it can be used to enumerate accounts) but an invalid login or account locked out message would separate these 2 cases nicely. This is really confusing for users. Just tell us what's going on.