Disable Scalix user

[markrich]

Presently I sync my Scalix users with OMLDAPSYNC from the LDAP server.
I have moved a few users from the staff list to the formerstaff list and resynced the list.
I don't want to delete a mailbox and have set OMLDAPSYNC to prevent this. I have changed their Kerberos password and they never knew the local one so can't log in, however, how do I disable the mailbox?
Is there a means to suspend access to a box via a command from the prompt?

[markrich]

I think I have found my own answer now. I used:

ommodu "user name" -K

Unless anyones of any other means?

Is there an LDAP variable one can add to a user's record which OMLDAPSYNC will pick up and disable the account upon seeing?