I was testing the mobile policy on an iPhone (4 w/ iOS 4.0.1) and when I turned off the mobile policy, the phone no longer allows me to select the "grace period" i.e. Require Passcode only allows Immediately. Is it possible that Zimbra (6.0.7) does not deprovision the device correctly?