LGI_BRK_DISUSER turns on the DISUSER flag in the UAF record when
    an attempted break-in is detected, thus permanently locking
    out that account. The parameter is off (0)  by default. You
    should set the parameter (1)  only under extreme security watch
    conditions, because it results in severely restricted user
    service.

    LGI_BRK_DISUSER is a DYNAMIC parameter.