At a user's detail sheet there is an option to block the user. If checked, this user will no longer be able to log into the system. The user himself will receive no notification of this, but will simply be shown that no combination of email address and password can be found.

You use this option to deny an ex-employee access to the system. You can also find more about this in this help desk article.