A completely stupid problem. Users who have already been disabled on the ad controller continue to receive password expiration emails. How to fix this?