When you ban a user it bans them based on IP address and unique teamspeak ID. If either of these are changed by the end user they can login again if they know the server password.
Its recommended to put a password on your main channels inside the server to prevent random people from disrupting you. This allows users to enter without a password to the server and you can direct them into your channels after you have validated them.