When a user attempts to sign on more times than permitted by the global security settings, they are locked out until the Administrator clears this option in their User record.