I think I have found out the solutions.  Only can logoff the PDC server and cannot lock the PDC server.

Thanks so much for K. Brian Kelley.  Without your reply, I still...

Yes,it's the domain administrative ID.  This account is also the cluster administrator and citrix administrator. 

Cluster service account ID is serviceadmin which also the domain ID.

SQL Services and all other...