How do I disable certain ldap accounts

On my server I am looking at enabling ldap account access so users can login with their intranet password. However our company would like to tie down who has access to Instant messaging. If I enable ldap account access, it means that anyone can login. Can I disable specific accounts in any way using ldap.

Thanks in advance

Orlando

you could create a group and place all users that are approved for chat into this group. Then use an LDAP filter to limit access to this group. There are several examples of this in the community already. Search for User Filters, LDAP Filters or AD filters.