@arnelgp has very accurately described how my 'kickout' system works.
Once the system has been locked, new users cannot login to the FE.
A different warning dialog appears at startup and the app closes automatically.
In my apps, the boolean Kickout field is in a linked SQL Server table...