Being an Exchange admin with several users, and having to enforce password policies might be tricky at first, because people are not used to have a PIN or a password set on their mobile handset and tend to forget it until they get comfortable with this.
Exchange 2007 has a neet password recovery feature that can be reached by the user through OWA, or by the Exchange administrator through the Exchange Management Console over or via Exchange Management Shell using the following script:
Get-ActiveSyncDeviceStatistics -Mailbox:"alias" -ShowRecoveryPassword:$true
In order to activate this function you must create and Exchange Activesync Policy on the Client Access Option of Organization Configuration, and set the "Enable password recovery" property.
If the user ever forgets its PIN, he sould then browse over to OWA and in the Options panel choose “Devices”, select the device they want to recover the PIN and click the button that says “Display Recovery Password”.
A new password is then generated and should be entered on the device.
In order to enter the new password on the device without resetting it, in the keypad screen you must go to “Menu- Reset Password” and then insert your new PIN.
Afterwords you will prompted to enter the recovery password provided in OWA.
If all goes well you should have successfully reset your PIN/Password.