User idenity stolen by spammer

I have a couple of users who are getting mail returned to their mailboxes regarding e-mail they have never sent. These are spam messages that are being sent out under their e-mail accounts without their consent or knowledge. Is there any way to stop this from occuring. We are using Exchange 5.5 and Outlook 97 and 2000.

Thanks

Don Coors