title: Retrieving only enabled accounts on active directory
body: <p>I'd like to send a search string to Microsoft's Active Directory (using Java) that says "give me all the users who have an enabled account."</p>
  
  <p>Currently, I have:</p>
  
  <p>String search_string = "(&amp; (objectClass=user) )";</p>
  
  <p>but, of course, this only give me the users on AD. I'd like to also get only those who are active. It's in Java, but I don't think it matters for LDAP.</p>