salt/base/disabled_use...

# We purposely use the same state name for disabled and enabled users to force
# an error if an attempt is made to both enable and disable a user.
{% for username in pillar['users']['disabled'] %}
user_{{ username }}:
  user.absent:
    - name: {{ username }}
    - purge: False
{% endfor %}