I have an issue whereby if a user is a member of domain admins they inherit the ability to send email as any user. I have been told the following by Microsoft Product Support which I do not believe is correct. Can anyone confirm this?;
As discussed on the phone earlier, in Exchange Server 2010 SP2 the member of “domain admins” can send email on behalf of any user is a default behavior.