Depends on how you want to it to work and who you want to stop. The normal way would be to apply a hold code (eg credit hold) to the account so that any sales orders created would need to be released. If you really want to prevent the order from either being created you could use row security but this may cause other issues. With the latest tools releases you could also pull a stunt using an orchestration to cause the SO creation process to error.