Did the university at any point specifically communicate to him that he is refused access? I find that a very defining point.

Automated limiting, or blocking is not the same as explicitly saying you as a specific person or entity are forbidden.