Whenever people try to do that kind of shit to me, I make sure to let them know that I have access to the organization's Active Directory, and it's not at all unusual for accounts to get locked out every now and again.
If I'm feeling especially vindictive, I can even move their files and Outlook to a different OU.
