The user looking for an Active Sync password in Exchange 2007 needs to log into Outlook Web Access, click on "Options" then "Mobile Devices" and you will see three choices in the Main Menu. Remove Device Association, Remote Device Wipe, and Password Recovery.
If you click on the Password Recovery Link, it will display the password you used to lock/encrypt your phone when the Active Sync policy was enforced on your Exchange user.
I have already tested the process with an iPad 3G, iPhone4 and an HTC Evo.
Any device capable of connecting with an ActiveSync application will work the same way.
I doubt if Exchange 2010 is any different..
Outlook Web Access is the key...
What would Clark Kent do to someone who stole his identity?