Put users who are still active on the domain in the restrictions group
I have MAC users in my environment that I want to restrict from the use of ADSelfService. The current configuration does not allow me to restrict individuals who have ACTIVE AD Accounts. How can I set these users so they are not permitted to register without disabling their accounts, finding them then re-enabling them?