AD Query - Computer disabled account

Hello

I would like to put a query to check if the computer account is disabled in our Active Directory, and if it's the case, refuse the VPN connection .

Do you have a model of AD Query for this type of need ?

BR

Jerome