I need to be able to exclude users from the import from AD that have an account that is expired BUT not disabled.
We currently filter like this
Attribute Operator Filter userAccountControl Bit on equals 2
So any account that is disabled is not imported. But we have the situation where we need to exclude accounts that have expired that maybe enabled still.