Its a bit difficult to understand what you are trying to achieve but if you are saying you need the user that come with the DefaultAuthenticator to be inactive you can set this on your Authentication Providers. Otherwise you can just reorder them according to where your users are coming from as per your preference. i.e put SQLAuthenticator at the top and set the DefaultAuthenticator as optional
For the Ldap Users this do not work. They to be profiled with their ldap group!
Where are you checking these groups, in console or in analytics?
What are the control flags which you have set for your LDAP and SQL Group Provider?