Check individual sites, or leave all checked for org-wide access.
This will deactivate . They won't be able to log in.
