Currently our system locks a user out after 10 bad password attempts. We are looking to change that number to 3 attempts. Has anyone reduced their lockout limit lately? If so, can you quantify the impact it had on the number of password resets your support group had to handle?