Hi Ketiller,
If I understood correctly, your instance shows several domain users with status disabled.
My suspicion is the absence of rules mapped to the group those users are members of in AD.
A bug was detected a while ago in Acumatica by which a user would try to sign on to Acumatica though AD. At this point , if the instance did not find any role mapped to the group the user is a member of, the instance would deny the sign in but a domain user profile would be created anyway.
I am not sure if that was corrected in more recent versions. In any case, do check those disabled profiles to confirm whether or not those users belong to an AD group that is mapped to a user role in Acumatica.