Lock/Unlock User Account

Hi,

What is the best way to provide a way to lock and unlock a user account from an application?

I have an administration area, where an admin could do some operations about an user account, and one of them would be to temporary lock/unlock the user account.

So, if he is locked he couldn't authenticate on the application until he is unlocked again. 

I'm using ActiveDirectoryMemberhipProvider!

I was thinking on create a "suspended" role, and add the user to this role if the admin locks his account, and then deny the access to the appliaction if the user is in this role.

Is there a better way to do this? I'm still learning...

Thanks!
...