User accounts can be de-activated by webmasters by unchecking the "Active" checkbox under the Additional Info tab while editing a particular user as in the screenshot below.  Once de-activated, the user will be denied backend login access to the dotCMS.