if user.try(:active?)
            if user.lock!
              change user.login, "-- Locked active user '#{user.login}' (#{user.name})"
            else
              change user.login, "-- Failed to lock active user '#{user.login}'"