We have a status field on customer records {entitystatus}
You could create a workflow (Transaction > Type is Sales Order) with workflow action : return user error, lock record, show message etc (depending on how strict you want to be) setting up the condition : Customer > Status IS or IS NOT XYZ
That should work