For Active Directory to be secure, dormant accounts must be deleted. But before deleting such accounts, it is preferable to keep them disabled for a while. It is advised to disable users' accounts when employees leave the company or take a lengthy time to do so.