then you should give 2 warnings to them.
don't give 3rd warning to the xyz user but in place of it delete user account also of the user by which it will be not able to register with new domain in future neither he will find his account or unable to logon on x10Hosting. by doing this type like...