What is the easiest way to disable a user account? I'd like to setup users/companies in the system (just to capture their contact information such as address, phone, etc), but not allow them to login (for now). Aside from setting up a userid (email) and password, and not telling them the password, is there an easy way to just disable their account for login? Another way I thought of is to setup a system role with no access. Is there a better way or something internal to the system that can be set to disable login or should I use the methods I identified?
Hmmm.. I would have done what you did (setup the account but not send the password). I guess a client could put in their email and get new password sent via 'forgot password' function. so maybe just create user with fake or email only you have - ie temp@yourdomain.com ?
Yes, there is. Create a new role with no system access and assign it to the user. Users that have roles without system access will not be allowed to log into the system.