I'm not an AD/LDAP expert by a long shot, but here goes. We're using AD/LDAP for our Confluence authentication and apparently when someone logs in, we're searching disabled LDAP users (those who've left the company). The problem is when a current employee has the same login ID as someone whose left the company. In our User Schema Settings we are using the following in our User Object Filter: (&(objectCategory=Person)(sAMAccountName=*)). I'm looking to find the parameter that will skip over any LDAP user that is no longer with the company. Thank you.