Active Sync Login Time Restriction

view story

http://serverfault.com – Is there any other location restricting a user from accessing their emails from their phone using active sync, besides on a domain controller ->active directory->user properties - > account -> logon hours. The user's logon hours are allowed all the time. To add to the mystery the user is an admin on the domain.(He seems not to be able to get emails from 7:00pm to 8:00pm) Its a Windows 2003 Server environment. Thanks for any help ahead of time. (HowTos)