It recently came to my Bosses attention that it was possible for users to remove their "from" address, in the "reply to" action, in a vacation rule.

Here's a bit of background...

The boss opens groupwise and sees a message without a from address. He calls me over to report the problem, and initially thinks that it's a piece of SPAM or a possibly malicious piece of email, since it's essentially anonymous...

I notice that the text is basically an out of office response, but the from field is empty. I recreate the problem by physically removing the from address in the actions of my test rule.

My boss considers this to be a bug in groupwise.

Does anyone know of a way to prevent the users from removing or changing the from address in the reply action of a rule?