Only users and groups that are entitled to use voicemail should have their mailbox activated.
All mailboxes must be protected by a Voicemail Code, except when connecting from trusted extensions (by the use of the User > Source Numbers). The recommended minimum is 4 digits for internal use, 9 when the mailbox can be accessed externally.
The mailbox Voicemail Code policy should be enforced by setting the voicemail Default Telephony Interface to Intuity in the Voicemail Pro client, and minimum PIN Length to 4 or 9 using the IP Office Manager setting System > Voicemail > Voicemail Code Complexity.
Note: If IP Office voicemail TUI is used, the users are not forced to set a new Voicemail Code on initial mailbox access.
Where a phone is in an uncontrolled area, the default Trusted Source Number for Voicemail access should be removed, so that all IP Office Voicemail access requires entering the Voicemail Code, even from the user's home extension.