I have an application that stores a list of users ([Domain][Username]). I need to be able to scan through this list of users and check if they are still active/enabled in Active Directory. 

I've reviewed the OOTB AD User and User URM SmartObjects / Service Brokers but cannot find any way to check this. 

If I use the GetUserDetails on AD User SmartObject for an inactive/disabled AD user, the Smo returns an error, but not sure if I can use this to verify active / enabled users.

Also, during workflow processing, if the Destination User happens to be disabled / inactive in AD the workflow enters an error state. It would be great to be able to check for this and handle gracefully either by escalation or workflow re-routing.

Version: K2 Blackpearl v4.6.11 (currently)

Any help / pointers welcome.