Is it possible to setup recertification/reconfirmation of employees that are contractors, so that after, 90 days for example, if recertification is not confirmed, they can not log in to NetSuite even with a password reset, unless and admin unlocks them?

I'm thinking a workflow that makes their record Inactive after 90 days