Enable the Synchronize Object Inactivations between Directory Server & Active Directory box.
Enable one of the following buttons to specify how Identity Synchronization for Windows will detect and synchronize object activations and inactivations:
Modifying Directory Server’s NsAccountLock Attribute Directly
These options are mutually exclusive.