Retrieve existing security settings from phone

[htsource]

We're running BES 4.1.7 and trying to push a policy out for enforcing password lock and timeout. It would be great if we can check existing settings on some phones for password timeout, such as what the value is currently set to. I can see from BES console if an user has a password lock, but not much beyond that.

Any help would be much appreciated.