Exchange 2003 SP2 and Exchange 2007 have options to require a security code on a device that will connect to the Exchange server using ActiveSync. This setting is optional in Exchange 2003 but is enabled by default in Exchange 2007. Without getting into the reasons why you might want to reconfigure Exchange 2007 so that ActiveSync devices do not require a device security code, if you do change the Mobile Device settings after an iPhone has already connected with ActiveSync and is requiring the password, you have to jump through a couple of hoops to actually get the iPhone to pick up the new security settings.
OK, they’re really small hoops, but it’s worth pointing out nonetheless because I had to Google quite a bit to uncover this tidbit. To remove the security code requirement from the iPhone, do the following:
- Remove the Exchange account from the iPhone configuration.
- Turn off the security code in the iPhone settings.
- Add the Exchange account back to the iPhone configuration.
That’s it. If you’re prompted to create a security code when you re-add the Exchange account, then the Exchange policy hasn’t been modified correctly, and you need to dig into that. But if the requirement for the device security code has been correctly changed, you will not be prompted to enter a security code in step 3 above, and no reset of the iPhone is needed.