Spoofing question

[mikee]

we have a w2k3 domain and exchange server. I got a user that received a
spoofed message. My question is he said it was in his sent items folder. Any
ideas on how it would have gotten there.

Thanks in advance

 

[Roady [MVP]]

He received something in his Sent Items folder? Manually moving it or having
created such a rule comes to mind.