How to stop disabled user accounts from syncing with Azure AD Connect

spanougakis just know that when you do this you will stop syncing all your shared, room, and equipment user accounts/mailboxes.  You need to sync some disabled user accounts so your query should account for those in some way.  This is why people usually just exclude an OU where you move your users to exclude them from sync.  A better solution, if your admin team can handle it, is to use attribute filtering so you don't need to move people between OUs to exclude them from syncing to Azure AD.