HI there,
The syntax would be.
(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))
Slightly different to what you posted. This is the correct LDAP filter syntax to get all user accounts, except those that are disabled.
Tony