Web Only Access

I would like an alternative solution in prohibiting Notes users from using their id to access the Domino environment. The only solution I can think of is re-creating the account by having the system override the existing settings, do not distribute the user id, and reset the HTTP password. Are there any other options besides this one?

Subject: Web Only Access

Why not just firewall the NRPC port (1352) on the server?