Inactive users set in snipe-it get set to activated when they login

[lonelyadmin]

Activated gets set in user table when AD user (who is not activated) tries to login. We don't want anyone with an active AD accoutn to login, only the ones we grant access to by clicking "Login Enabled" or by setting "activated" 1 in users.activated.

Running v5.2.0 - build 6339 (master). No accounts have reversible encryption enabled. Verified with: Get-ADUser -Filter 'userAccountControl -band 128' -Properties userAccountControl

I'm syncing against AD/LDAP, TLS over tcp/389. Syncing seems fine. My goal is to be able to assign assets to users, but not let them login. Currently we are using snipe as an admin only tool, so we need to know about users but not let them muck about.

Happy to supply any logs.