What do you call disable the login?

If it is "ALTER LOGIN ... DISABLE", I tried it but it doesn't seem to work for windows groups...:(

I have found a "DENY CONNECT SQL TO ..." that seems to work but it is quite dangerous since it is a DENY permission (unexpected lock outs).

I wanted to avoid to revoke permissions from the database since there are object level permissions (--> hard to maintain permissions) but you may be right!?

I was hoping for a magic bullet...

Thanks anyway! 😎