attaching a conditional task to a failed Account Logon events in Domain Controller

hi friends

i have two question about attaching a conditional task to a failed Account Logon events in Domain Controller (2008R2)

as we know, if we enable Auditing in DC, when a domain user enters a wrong username or password at his client computer, a failed Account Logon event Appears in the DC event viewer. 

so in Domain Controller  i want to do a task so that only if a user entered his credentials for example for 3 times , then my favorite task be run ( for example Domain Controller be shut down ). what should i do ?

(in Dc , if i attach that task to that failure event , then if any user enters his credentials wrong for the first time ,  my batch file(task) will be run on his computer, but i don't want this ).

my second question:

in DC how can i define a task so that if a domain user entered his credential wrong , dc perform a shutdown batch file on that particular client computer ( for example ip add of 172.16.1.2)

how can i redirect the computer ip address wich is logged in Account Logon event , into cmd shutdown command ?

thanks in advance