Workflow for Inactive users who are NOT disabled

Want to disabled users who have not logged into AD in 90 days. Built a workflow using the built-in  "Retrieve only inactive user accounts" logic, but this logic also pulls in users who are already disabled.  I tried to use the "filter" to exclude disabled users, (using Account is Disabled = true) but that does not exclude them.  Am I missing something obvious?