To put together the right query to get users that are not disabled accounts nor service accounts, you will need to add the following parameters to the query. Update: I found a better approach to removing disabled accounts (!userAccountControl:1.2.840.113556.1.4.803:=2)
Read More...