I am having a strange problem. Our company's security policy requires me to lock user accounts if they don't use interactive (ex. SSH) access to the server. But the users should maintain access to their Zimbra-based IMAP mail.

Is there a way to lock the user account but allow the user to have access to their email via the web interface and desktop mail client?

Thank you,