Several times a year I have an employee that ends up getting hacked due to visiting or opening up e-mail. Changing the password and clearing out the GWIA (Send, Receive, Defer) areas always fixes it. The folders end up having hundred's or thousands of files hung up in them that have to be either removed or deleted outright. I was wondering if I have something setup incorrectly that is allowing this to occur or if there is something that can either alert me or start to lock down this activity to prevent that type of event from occurring in the first place. The folders get so full that GroupWise slows down or in a few cases stops responding.

Are there settings I can use to help with this or is there a script that can monitor and report on the event?

Thanks for the help.