As an administrator you could simply change the user's password, or completely delete their account. Then they will not be able to log in. The difference between this and locking the account is that the user will see the message "login failed!" instead of "Sorry, this account is currently locked."