of the ways listed which is the best way to

which is the best way to temporarily suspend a user’s ability to interactively login?