In some environments, there are times when locked application/databases accounts need to run some cron jobs. In linux, by default, a locked account can not run the cron job.
We can enable this by editing a specific setting is disabled in /etc/pam.d/crond file.
Here is the details:
# cat /etc/pam.d/crond