Applies to: Exchange Server 2013, Exchange Online

Topic Last Modified: 2013-02-22

You can configure the number of sign-in failures allowed before the PIN is reset for an Outlook Voice Access user to a value from 1 through 998. The default is 5. The number of sign-in failures allowed before a PIN is reset is configured on a Unified Messaging (UM) mailbox policy and applies to all Outlook Voice Access users associated with the UM mailbox policy.

Note:
You can increase security by configuring the Number of sign-in failures before PIN reset setting to a number less than 5. You decrease security if you configure it to a number more than 5.

For additional tasks related to Outlook Voice Access PIN security, see PIN Security Procedures.

What do you need to know before you begin?

  • Estimated time to complete: 3 minutes.

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "UM mailbox policies" entry in the Unified Messaging Permissions topic.

  • Before you perform these procedures, confirm that a UM dial plan has been created. For detailed steps, see Create a UM Dial Plan.

  • Before you perform these procedures, confirm that a UM mailbox policy has been created. For detailed steps, see Create a UM Mailbox Policy.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection.

What do you want to do?

Use the EAC to configure the number of sign-in failures before a PIN is reset

  1. In the EAC, navigate to Unified Messaging > UM dial plans.

  2. In the list view, select the UM dial plan you want to change, and then click Edit Edit Icon.

  3. On the UM dial plan page, under UM Mailbox Policies, select the UM mailbox policy you want to change, and then click Edit Edit Icon.

  4. Click PIN policies, and next to Number of sign-in failures before PIN reset, enter a value between 0 and 999.

  5. Click Save.

Use the Shell to configure the number of sign-in failures before a PIN is reset

This example sets the number of sign-in failures before the user's PIN is reset to 3 for UM-enabled users who are associated with a UM mailbox policy named MyUMMailboxPolicy.

Copy Code
Set-UMMailboxPolicy -Identity MyUMMailboxPolicy -LogonFailuresBeforePINReset 3

This example sets the number of sign-in failures before the user's PIN is reset to 3, the maximum number of sign-in attempts to 5, and the minimum PIN length to 9 for UM-enabled users who are associated with a UM mailbox policy named MyUMMailboxPolicy.

Copy Code
Set-UMMailboxPolicy -Identity MyUMMailboxPolicy -LogonFailuresBeforePINReset 3 -MaxLogonAttempts 5 -MinPINLength 9