E1 LDAP security - user gets 'user disabled' message but is not yet created.

Using E1 LDAP security, we normally have the user attempt to log in to E1 with thier Active Directory credentials.

They receive an error message about no roles assigned.  This process creates the profile record and a default role we named 'ESS'.

Once that is created by this procedure, the admin can complete the users role assignments and any other profile details such as linking to their address book record.

We ran into an error with a new person doing the above  - she is getting 'user id is disabled'....yet, it was never created.

We don't know where to look for this disabled detail to clear it and resume creating this user in E1.