Here is a link to a document Ben and myself just put together regarding User Deactivation.
If you have ever wondered what happens when you deactivated a user, or why you may want to do such a thing in the first place: this should go some way to answering those questions!
Also explains how the functionality ties in with GDPR.