One thing that's a hassle for us is enabling ActiveSync for each user. We'd like to turn it on for everyone, but that's too expensive as only a fraction of users require it.
My suggestion is to automatically enable ActiveSync for an account after the first successfully ActiveSync authentication. Doesn't seem like it would be difficult: 1) wait for an ActiveSync request, 2) if authentic, enable for user and increment license counter.
I know there's an API call for this and we've already written the code, but it's extra work for the user (login to control panel, perform a few steps). It would be much easier to tell users to configure their smartphone and when they do so, it just works (like POP and IMAP).