Policy VPN - refuse computer disabled

Hello

I have defined a policy with several checks before to allow an user to start a VPN connexion. I would like to block computer if the computer account is disabled in our Active Directory. How I can create this policy condition ?

BR