There are no attributes in AD for the User objects that store when the object was disabled, just disabled or enabled.
As such, determining when an account was disabled is not generally possible.
You can however return objects that are disabled and that have not logged on in x days.
This does not tell you when the account was disabled but can provide an idea about how long the account has been inactive.
To create a report to return disabled objects that have not logged on in the past 45 days:
- Copy the 'Users Not Logged On In The Past 30 Days report (found under Active Directory) to the My Reports folder
- Right click the report in the My Reports folder and select Edit
- Change the Report Name to more accurately reflect the new report and modify the Description
- Click The Fields tab
- Scroll down to Domain User and under Domain User select Is Disabled and click Add
- Click the Parameters tab
- Double click the 'Domain User: Last Logon Timestamp (Domain User)' parameter
- At the bottom under Supply a default value, change from 30 to 45 and click OK
- Click Create
- Under Usage click the drop down and change from Optional to Hidden
- Under 'Select the field to associate with this parameter' click the drop down and select Is Diabled (Domain User)
- For the Condition Operator select Equals
- Select Supply a default value and select Yes
- Click OK
- Click OK