add support to ignore disabled accounts in AD