diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index 32aca38e20fb6d5a8f55aa4a39dad3f000458063..99f25d1fb28b51df8d677569f9385b51c94035c6 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -26,5 +26,6 @@ krb5_lifetime = 48h
 krb5_renewable_lifetime = 200h
 krb5_renew_interval = 30m
 ad_gpo_access_control = disabled
+{% if sssd_show_only_enabled_users|default(False) %}
 ldap_search_base = dc=fsmpi,dc=rwth-aachen,dc=de?subtree?(&(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
-
+{% endif %}