1 files changed, 3 insertions, 1 deletions
diff --git a/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c b/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c
index b98a34d1f..2644a0108 100644
--- a/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c
+++ b/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c
@@ -885,7 +885,9 @@ sync_acct_disable(
     }
 
     if (direction == ACCT_DISABLE_TO_DS) {
-        if (!isvirt) {
+        if (!isvirt ||
+            (ad_is_enabled && (ipaconfig->activated_group_dn == NULL)) ||
+            (!ad_is_enabled && (ipaconfig->inactivated_group_dn == NULL))) {
             char *attrtype = NULL;
             char *attrval = NULL;
             attrtype = "nsAccountLock";