LDAP not preventing disabled users from authenticating

Looks like this is a bug with Microsoft AD and Guest Account, fix is disabling the guest account.

Guest Accounts on AD Server