BES is pretty old unfortunately 4.0.4
wireless activation is how we do them anyways, but if the task is passed on to the end user or even one of the mobile engineers then things are bound to get messy
We generally have to setup and look after the devices ourselves (messaging team)
Only things in the policy are security based settings (i.e. password required, password length=x etc)
From what you have explained there is no timeout so I am assuming the issue may have been down to a problem with the device itself.
thanks for the reply penguin3107