Restrict the number of login attempts for a Vista user.
Vista does not have a settings for login attempts. This is normally controlled by Windows and the Windows Domain.
Create a Vista domain user. It is good practice to always log out of Windows when done.
The IT department will typically have a set of rules for the domain. One of these will usually set the domain user to 3 login attempts to Windows before the account is locked.