A disabled user cannot log in to the domain. Unlike account lockout, which is an automatic process that is based on the number of times a user incorrectly enters a password, an account has to be manually enabled or disabled.
1. Open the Active Directory Users and Computers snap-in, or Click Start, click Run, type dsa.msc and then press ENTER.
2. Right-click on the domain and select Find.
3. Beside Find, select Common Queries.
4. Check the box beside "disabled accounts."
![[AD-Tutorial]-How-to-find-disabled-users-in-the-domain-1](/./images/stories/windows/[AD-Tutorial]-How-to-find-disabled-users-in-the-domain-1.gif "[AD-Tutorial]-How-to-find-disabled-users-in-the-domain-1")
Figure-1 Active Directory Common Query
5. Click the Find Now button.
