The server owner can as long as they logged in with it unlocked first to flag the account. You can not create an account in the DB ahaid of time.