Filtering out Disabled AD Users from IDS

Below is an example of a query string for filtering out disabled users:

&(ObjectClass=user)(!(UserAccountControl:1.2.840.113556.1.4.803:=2))

&(|(ObjectClass=user)(ObjectClass=contact))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))