🚀 go-pugleaf

Disabling the account in this case was probably overkill.  An email
message or phone call would have been better.

However, in the past I have had occasion to disable a student account,
and the reason then was not malice:  It was to preserve evidence until
the student's side of the story was heard and everything could be
investigated.  This seems about as fair as you can get.  As soon as the
student gets in touch with the sysadmin, they can both consider what he
was actually doing, and if it proves to be innocuous, the acount can be
re-enabled with (hopefully) no lasting negative effect on anybody.

If the student *was* doing something truly malicious, and if serious
action is needed, then it is important that the state of the student's
account be preserved, so that any incriminating evidence isn't lost
before the investigation is complete.

But to disable an account for some ftp attempts over one quiet weekend
seems excessively paranoid to me.
-- 
Rahul Dhesi <dhesi@cirrus.COM>
UUCP:  oliveb!cirrusl!dhesi