In Cisco Unified Communications Manager Business Edition (CMBE), you use Cisco Unified Communications Manager Administration to specify password and account lockout policies for phone and web-tool access, and the logon policy for web-tool access for all users who access Cisco Unity Connection voice messages.
The policies are specified on the User Management > Credential pages in Cisco Unified CM Administration. See the online Help, or the Cisco Unified Communications Manager Administration Guide for details and related topics.