That would be a good idea, but limited information can be obtained through most of those honeypots you install.

The most information can be obtained through a honeynet. Set aside a piece of the network for him to break into.Seperate that network from the rest of yours. Give the computers write access only to a share on another computer that is secured so it can write logs off the honeynet in case of demolition of the honynet computers, but the data can't be deleted or modified. A safer way is to make a program that sends the information to a comp and a program on that side to process it. Giving the attacker not even write access to any shares. Also run a sniffer for all data on that honeynet.

Your taking a risk, but taking precautions like seperating it from the rest of the network(through a firewall and/or subnet mask as well as other ways) will make it a little harder. This may be a script kiddie, also may not be. Try to make it look as close to the original network from the outside as you can.

Switch the ip of the server getting brute forced if you can, changes might have to be made to the rest of the network. Give a server computer in the honeynet that ip, give it a easy password. You can even leave it unpatched if you want to make it easier for him to break into.

Pretend you don't notice the attack, watch his activities.

Some attackers give away information on compromised computers, contacting friends. Making mistakes thinking they can cover thier tracks because they have control. If the honeypot is discovered, the data is stored safely on a computer out of the honeynet.

This way is a bit more expensive and time consuming though, depends on how bad you want to catch the guy. A honeynet also let's you establish his intentions. No need to prosecute a harmeless guy, costs money.