Is there any way to export a policy and import it to a workstation that's offline? I ran into an issue where after I rolled out MP4 to a workstation that was VPN'ed in it broke the VPN. I was able to fix my policy, but the user had to come back to the office to get the latest policy. It just made me wonder if there's a better way.

You must create an additional mobile policy.

To what end? I know I can create a mobile policy after the fact, but in-case-of-emergency is there no way (via the registry, etc) to unlock some of the settings so that the users can change them?

Perhaps you could change the policy to where options are set but not locked (but still password protected.) That way they can be changed at the client level at some later time if you find it necessary, either by changing them manually or by importing a new .cfg file with avp.com IMPORT