Enable the Synchronize Object Inactivations between Directory
Server & Active Directory box.
Enable one of the following buttons to specify how Identity Synchronization for Windows will detect and synchronize object activations and inactivations:
Interoperating with Directory Server Tools
Modifying Directory Server’s NsAccountLock Attribute Directly
These options are mutually exclusive.
Using a Custom Method for Directory Server