And you tried just disabling it on the BB like skyman said? Sounds like the policy is fine but the handheld just needs to have the password switched off.
Are you saying that switching it off on the BB results in it being enabled again some time later?
I was a BES and Exchange admin once.
Then my world turned Blue.