A word of advice: don't go crazy with all these common "safety"-features: restrictions on number of attempts, or the outright silly BS about lover/upper-case and numbers mix for passwords.
Access is not suitable to run the finances of a country anyways. Further, Access is mostly ran on a LAN where you vary seldom have access from general public.So think about this twice, before you bless your users with "safety"-features that everyone just curses.