What do you mean by "locked out"?
After a user has made several incorrect login attempts, phpBB3 requires them to enter a visual confirmation code, they are not locked out.
ANyway if you go to the Admin CP > Manage Users and type in the user's name you can administrate that user.