ADSelfService Plus now allows you to set a limit for the number of self-password resets and account unlocks users can perform in a given number of days. For example, you can limit the password resets to a maximum of 5 times a month for a user. To do this,

• Go to Policy Configuration under the Configuration tab.
• Click Advanced Settings of a self-service policy.
• Go to Block User tab.
• Select Allow users to reset password only 'x' times in 'x' days option. Enter the number of attempts and number of days as required.
  
• Select Allow users to unlock account only 'x' times in 'x' days option. Enter the number of attempts and number of days as required.
• Click OK. 
  

This setting along with Enforce Password History settings will ensure that users can't exploit self-password reset to revert to their old password.