Property on user object to show if AD account is disabled
When an employee quit his/her job we disable the user`s AD account. This should be reflected onto the user object, so we can use REST queries to filter out all "old" users.
As far as I know, today, there is no way of retrieving all "active" users from siteusers.
1. create custom property in UPS
2. Import userAccountControl value
3. Value "0x02" is disabled account.