ByAdSync: UserForbiddanceReason = ...

The user is forbidden by AD/LDAP synchronization.