Go to administration --> Security - admin --> users
When a user tries to logon too many times it will be blocked automatically and cannot logon. The blocking has to be releaved by hand. There's no automatic time-out.
To make a user inactive the following can be done:
- Fill in 'valid till' date --> If the valid till date is smaller than current date the users cannot logon
- Make the 'active' field not checked