Lock down "email configuration" in hosted Outlook *or* pick up user's login email address and use within Outlook
We have RE NXT, using SMTP Relay from the database view to send emails. Users can currently set any email address as the sender under the "configure email" option in the Tools menu. This could allow users to send email from a spoofed address.