The way I have done it in the past is to kill the SubSystem they enter when they log on. So if your running a default config, just:
ENDSBS SBS(QINTER) *IMMED
Then once it’s down start it back up. You can also change the system value that limits the amount of time they are able to stay logged on.
try ‘idle’ or equivalemt command