diff --git a/PVE/HTTPServer.pm b/PVE/HTTPServer.pm
index 7859081bf..39ec1f0bb 100755
--- a/PVE/HTTPServer.pm
+++ b/PVE/HTTPServer.pm
@@ -85,6 +85,7 @@ sub auth_handler {
 	    die "No ticket\n" if !$ticket;
 
 	    ($username, $age, my $tfa_info) = PVE::AccessControl::verify_ticket($ticket);
+	    $rpcenv->check_user_enabled($username);
 
 	    if (defined($tfa_info)) {
 		if (defined(my $challenge = $tfa_info->{challenge})) {