To disable a account we use an internal variable called Login Disabled which is transformed into dirxml-uACAccountDisable. After this action a rule has the following <do-if>-statements in which a variable is use that is no longer available, I think, because of the transformation process:

<if-op-attr mode="nocase" name="Login Disabled" op="changing-to">false</if-op-attr>
<do-append-xml-element expression="operation-data/event-audit" name="activated"/>
<do-append-xml-text expression="operation-data/event-audit/activated">
<token-text xml:space="preserve">true</token-text>
I want to know if I am right and I have to use the variable dirxml-uACAcccountDisable or a statement using the source attribute? Thank you in advance!