How to: disable or change the 4 digit pin code that is enabled after mobile device connects to the Exchange 2010 within SBS 2011

After you have configured your mobile device to receive its business e-mail via ActiveSync from your SBS 2011 Exchange 2010 server, it is asking for a 4 digit pin code. This is because the default configuration on the SBS 2011 Exchange Server is to require a password for ActiveSync devices when they are going to synchronize with your server.

To disable or change this feature open Exchange Management Console, go to Organization Configuration, Client Access and choose the Exchange ActiveSync Mailbox Policies. Do properties on the Default policy and select the Passwords tab.

To completely disable the password remove the check at Require password. Of course you can also change the settings to your own requirements.

You can also create separate Mailbox policies with different settings, so you can set other policies for different users. When you create a new policy and want to attach it to a user, go to Recipient Configuration, Mailbox, do properties for the Mailbox user you want to change the policy.

Select the Mailbox Features tab, select Exchange ActiveSync and choose properties, now you can browse to select the other policy you have created.

Some additional information about what settings you can control with the ActiveSync policy are listed over here: Understanding Exchange ActiveSync Mailbox Policies

Please note not all features are supported with all kinds of mobile clients, so before you configure the settings make sure the settings are supported with your type of mobile devices.

Posted in Blog, Exchange 2010, Howto, SBS 2011 by ronnypot at October 11th, 2011.
Tags: , ,

7 Responses to “How to: disable or change the 4 digit pin code that is enabled after mobile device connects to the Exchange 2010 within SBS 2011”

  1. Ben says:

    You have to be careful with this one. I did this with one of our clients Nokia phone while it was already joined to the domain via Exchange mail and we could not find the pin code to unlock the phone. So I changed the setting on the CA Exchange to disable pin code and it automatically wiped the phone’s SD Card and did a Factory Reset to the phone. The client has lost all it’s contacts and files from the SD card.

  2. Rory says:

    I have had this same issue as Ben mentioned. My client is using a NokiaN800, but his phone yet to be accidently wiped.

  3. Edgar Santos says:


    how can I disable the 4 digit pin on Exchange 2003? I belive the option is similar, I have it disable, but one of the clients have an Android phone running version 4.0.1 and I can’t disable it on the phone. It allways asks for some type of security (pin, password, etc.)

    • ronnypot says:


      I have never used this for Exchange 2003 but you can configure some settings via Exchange System Manager I am not sure if this is the same.. Go to Global Settings, do properties on Mobile Services, click Device Security.

      Hope this is what you need, otherwise I think you have to go to the Smartphone dealer and they can help to disable it somewhere on the device.

  4. Jack Pannell says:

    I have several customers with SBS2011. I have done sp 3 for Exchange 2010 on 2 of these and the “enforce pda password” turns itself back on. Both companies beat me like a baby seal on this. Any way to stop SBS from reverting back to default here? the 2nd one I knew it was coming and immediately disabled it but I was too late. it immediately started enforcing. I turned it off as soon as the sp completed. I have several more SBS 2011 servers to do. Thanks!

Leave a Reply

Sharing Buttons by Linksku