I need to temporarily disable a users access to their Office 365 email but not their regular AD account. I don't want to delete the mailbox as emails need to stick around. Our AD is synced with O365.
If I Block sign-in via the O3655 admin centre, it's re-enabled shortly after as the AD account is not disabled. As a work around I have disabled IMAP, POP3, OWA etc in their exchange properties but was wondering if there was a better way of doing this, an AD attribute possibly?