assuming you have unrestricted access to the user information, which to me usually means I already have unfettered access to your system, why would I need passwords?
Do many systems allow nearly unlimited attempts? Is this common on some platforms? For all except the most locked down users; single task; it pretty much is three strikes your out, call to fix your access.