Posted this originally over at the official Motorola forum.
The Corporate Sync app used for Exchange mail has a bug, where even if your IT department does NOT explicitly require a PIN/password, the phone will still make you enter one and not allow you to clear it. Also, if your IT department does require a PIN, but less than 4 digits are required, the Corp Sync app will still force you to use at least 4 digits.
It's VERY annoying if you are used to having a phone without a PIN and suddenly it forces a PIN upon you.
This doesn't happen with the Droid X against the exact same Exchange server with the same ActiveSync policy. The server is Exchange 2007 SP2. (v8.2. build 176.2)