So far I can confirm:
I removed all the customers from Zammad and added them again via import (csv).
LDAP config was kept with the filter (therefore Zammad will never see the AD-Userobjects which match the email address with the imported csv objects.
Since then, my customers have not been disabled again. If this changes again, I’ll give an update here.
Cheers