All you have to do is enter the maximum number of invalid attempts allowed within a given time frame and how long the users should be blocked. This feature works similar to the account lockout policy in Active Directory.
Once a user is blocked, he/she will not be able to use ADSelfService Plus's reset password and account unlock options. The lists of blocked users are captured in a report for your future reference. You can also use the report to unblock a user.