Thanks for the responses. After the initial archiving run, the user's Archive Explorer was empty while his Inbox had the extra 100+ archived messages, which was an indication that something other than EV (i.e. the user) moved those messages. After the next archiving run, things sync'ed up and those messages showed up in Archive Explorer, further proving the point. I explained this to the user, who agreed to file those messages back to their folders.