Disable an Active Directory Account – Check Attribute userAccountControl
You can Disable an Microsoft Directory Account with the following Power Shell Command:
Disable-ADAccount [-Identity] <ADAccount> [-AuthType {<Negotiate> | <Basic>}] [-Credential <PSCredential>] [-Partition <string>] [-PassThru <switch>] [-Server <string>] [-Confirm] [-WhatIf] [<CommonParameters>]
More Information on the following Technet page.
https://technet.microsoft.com/en-us/library/ee617197.aspx
How to check if it worked?
The corresponding Active Directory Account should afterwards be disabled. This information is stored in the Active Directory Attribute named „userAccountControl“:
[ AccountDisabled, NormalAccount ]