diff --git a/xos/core/models/user.py b/xos/core/models/user.py
index 5436a90..dc96c22 100644
--- a/xos/core/models/user.py
+++ b/xos/core/models/user.py
@@ -123,6 +123,7 @@
     backend_status = StrippedCharField(max_length=1024,
                                       default="Provisioning in progress")
     deleted = models.BooleanField(default=False)
+    write_protect = models.BooleanField(default=False)
 
     timezone = TimeZoneField()
 
@@ -165,9 +166,10 @@
         if (purge):
             super(User, self).delete(*args, **kwds)
         else:
-            self.deleted = True
-            self.enacted=None
-            self.save(update_fields=['enacted','deleted'])
+            if (not self.write_protect):
+                    self.deleted = True
+                    self.enacted=None
+                    self.save(update_fields=['enacted','deleted'])
 
     @property
     def keyname(self):