Cannot Sign In lets you lock out Employee cards that are not users or no longer active.
For example, you may have Sales Reps that are not employees, that do not sign in to BigBusiness, but you need in your Salesperson list. Just set them as Cannot Sign In.