What's the simplest, quickest way to disable a collection of mailboxes using an ACL on the Exchange server, so that a domain security group can be specified with explicit denies? I've been puzzling over this -- a method of killing e-mail access for just a specific group of employees -- quickly and just as quickly reversible.
