Hi,

I'm struggling with this one. We're using Exchange 2010 SP3 and have several EAS Policies defined, which are all working fine. What I'm keen to understand is where the  maxDevicePasswordFailedAttempts is set, say to 10, is there a way of monitoring failed attempts to unlock the device. So for instance, if I can see a user who is currently at 7 failed attempts, I can intervene before they get to 10 and the device is wiped?

I don't think so.  The policy is pushed to the device and the device OS follows it.  Something interesting about that particular policy, the last time I worked with it, iPhones would never implement it because iOS implements a forced sleep after five bad attempts, and once it wakes up it resets that counter so it never reaches ten.  That's a reminder that the policy implementation is subject to the device OS developers' interpretations.