One of the options in the ActiveSync Policy is "Require Encryption on the Device." The question is what does the encryption? Does Exchange provision this encryption on the device once Exchange email is setup or does the end user have to do something? Also is there a way to verify that this encryption is set on the device, if that option is selected in the policy?