diff --git a/src/users.js b/src/users.js
index a8b0448db..6a38f93b0 100644
--- a/src/users.js
+++ b/src/users.js
@@ -139,12 +139,12 @@ function validatePassword(password) {
 
 // remove all fields that should never be sent out via REST API
 function removePrivateFields(user) {
-    return _.pick(user, 'id', 'username', 'email', 'fallbackEmail', 'displayName', 'groupIds', 'admin');
+    return _.pick(user, 'id', 'username', 'email', 'fallbackEmail', 'displayName', 'groupIds', 'admin', 'active');
 }
 
 // remove all fields that Non-privileged users must not see
 function removeRestrictedFields(user) {
-    return _.pick(user, 'id', 'username', 'email', 'displayName');
+    return _.pick(user, 'id', 'username', 'email', 'displayName', 'active');
 }
 
 function create(username, password, email, displayName, options, auditSource, callback) {