a simple fix would be to add a quota against them. In server manager > Quotas. This should stop them from getting any more mail until they reduce it under the limit. If they go over the limit they'll receive an email telling them to get it sorted. That's the easy way, or did you want to go in an manually look for stuff to delete?