How to Configure the Number of Logon Failures Before a PIN is Reset
Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.
Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3
This topic explains how to use the Exchange Management Console and the Exchange Management Shell to configure the number of logon failures that are allowed before the PIN is reset for an Outlook Voice Access user. You can configure the number of logon failures to be allowed before a PIN is reset from 1 through 998. The default is 5. The number of logon failures that are allowed before a PIN is reset is configured on a UM mailbox policy and applies to all UM-enabled users who are associated with the UM mailbox policy.
When Outlook Voice Access users dial in to a subscriber access number, they are prompted to enter their PIN so that the Unified Messaging system can authenticate them. After they have been authenticated, they can access the voice mail, e-mail, calendaring, and personal contact information in their Microsoft Exchange Server 2007 mailbox from any telephone.
Several PIN-related settings can be configured on a UM mailbox policy. The Number of incorrect PIN entries before PIN is automatically reset setting specifies how many sequential unsuccessful logon attempts can be made before the mailbox PIN is automatically reset. To disable this feature, set the number of unsuccessful logon attempts to "unlimited" by using the Set-UMMailboxPolicy cmdlet. If you want to specify a maximum number of sequential unsuccessful logon attempts before the PIN is reset, you must choose a number lower than the Maximum Logon Attempts setting.
Note
You increase security by configuring the Number of incorrect PIN entries before PIN is automatically reset setting to a number that is less than 5. You decrease security if you configure it to a number that is more than 5.
Before You Begin
To perform the following procedures, the account you use must be delegated the Exchange Organization Administrators role.
For more information about permissions, delegating roles, and the rights that are required to administer Exchange 2007, see Permission Considerations.
Also, before you perform these procedures, confirm the following:
A UM dial plan has been created.
A UM mailbox policy has been created.
Procedure
To use the Exchange Management Console to configure the number of logon failures before a PIN is reset
In the console tree of the Exchange Management Console, expand the Organization Configuration node, and then click the Unified Messaging node.
On the UM Mailbox Policies tab, select the UM mailbox policy that you want to manage, and then click Properties in the action pane.
On the UM mailbox policy Properties page, click the PIN Policies tab.
On the PIN Policies tab, under Failed Logons next to Number of incorrect PIN entries before PIN is automatically reset, enter a value between 1 and 998.
Click OK to save your changes.
To use the Exchange Management Shell to configure the number of logon failures before a PIN is reset
Run the following command:
Set-UMMailboxPolicy -Identity MyUMMailboxPolicy -LogonFailuresBeforePINReset 8
For more information about syntax and parameters, see Set-UMMailboxPolicy.
For More Information
For more information about Unified Messaging PINs, see the following topics: