So, the activation message with ETP.DAT attachment reaches the user's mailbox... but then just sits there?
If so, then this could be indicative of a permissions problem with the BES service account.
Look through KB article as well as all of the relevant KB articles linked to within:
KB13852 - Identifying and troubleshooting enterprise activation issues - Port3101.org : Your BES Connection