Exchange has a lock out policy to help protect against brute force attacks
if an exchange user is blocked (for too many access attempts) - the user can be unblocked as follows
in WSP (exchange control panel) to unlock:
Go to the customers mailbox --> click on the "General" tab --> if the account is locked out the "Account is locked out" checkbox is clickable.
click it, and save changes