Not all agents are using ToolKitCMA. So when they try to log on they may get a message that their account has been disabled.
When you search for their record, you search in the disabled records and click "enable". You may need to fix the email address as it may read "prufoxroach.com".
Another thing that could happen is the email address on the Agent Profile could have an extra ' ' after .com. Remove that and save and they'll be back in action.
When modifying the email address in ToolKit ou may get a msg that that email address is already in use. In that case there may be another record probably active, search for that one under "Agent Search", change the email address to firstname.lastname@example.org. And then disable the record. Then change the email address on the other record.
Dont send them a notice, just click 'agent search' or logout.