In Active Directory it is possible to disable an account without altering or removing any of its attributes. For example, the AD Account is disabled Action is used when an employee takes a leave of absence.
Provisioning Solutions uses this Action as a Rule Condition which evaluates True for each user that is disabled in AD. This Condition requires the userAccountControl attribute from Active Directory to be synchronized.