Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-08-18

This topic explains how to use the Exchange Management Console and the Exchange Management Shell to configure the number of logon failures that are allowed before the PIN is reset for an Outlook Voice Access user. You can configure the number of logon failures to be allowed before a PIN is reset from 1 through 998. The default is 5. The number of logon failures that are allowed before a PIN is reset is configured on a UM mailbox policy and applies to all UM-enabled users who are associated with the UM mailbox policy.

When Outlook Voice Access users dial in to a subscriber access number, they are prompted to enter their PIN so that the Unified Messaging system can authenticate them. After they have been authenticated, they can access the voice mail, e-mail, calendaring, and personal contact information in their Microsoft Exchange Server 2007 mailbox from any telephone.

Several PIN-related settings can be configured on a UM mailbox policy. The Number of incorrect PIN entries before PIN is automatically reset setting specifies how many sequential unsuccessful logon attempts can be made before the mailbox PIN is automatically reset. To disable this feature, set the number of unsuccessful logon attempts to "unlimited" by using the Set-UMMailboxPolicy cmdlet. If you want to specify a maximum number of sequential unsuccessful logon attempts before the PIN is reset, you must choose a number lower than the Maximum Logon Attempts setting.

Note:
You increase security by configuring the Number of incorrect PIN entries before PIN is automatically reset setting to a number that is less than 5. You decrease security if you configure it to a number that is more than 5.

Before You Begin

To perform the following procedures, the account you use must be delegated the Exchange Organization Administrators role.

For more information about permissions, delegating roles, and the rights that are required to administer Exchange 2007, see Permission Considerations.

Also, before you perform these procedures, confirm the following:

  • A UM dial plan has been created.

  • A UM mailbox policy has been created.

Procedure

To use the Exchange Management Console to configure the number of logon failures before a PIN is reset

  1. In the console tree of the Exchange Management Console, expand the Organization Configuration node, and then click the Unified Messaging node.

  2. On the UM Mailbox Policies tab, select the UM mailbox policy that you want to manage, and then click Properties in the action pane.

  3. On the UM mailbox policy Properties page, click the PIN Policies tab.

  4. On the PIN Policies tab, under Failed Logons next to Number of incorrect PIN entries before PIN is automatically reset, enter a value between 1 and 998.

  5. Click OK to save your changes.

To use the Exchange Management Shell to configure the number of logon failures before a PIN is reset

  • Run the following command:

    Copy Code 
    Set-UMMailboxPolicy -Identity MyUMMailboxPolicy -LogonFailuresBeforePINReset 8

For more information about syntax and parameters, see Set-UMMailboxPolicy.

For More Information

For more information about Unified Messaging PINs, see the following topics: