"lock/disable" user's mailbox