FYI: Looks like the "Enforce password on device" Group Policy setting is lost if you do an iPhone software restore and then re-sync your mail settings with iTunes.