You may be able to set up an API call that checks and sets the mailbox size limit periodically. That wouldn't prevent domain admins updating the account size, but it could be quickly returned to a valid setting based on how you set up the call.
Kyle Kerst
IT Coordinator
SmarterTools Inc.
www.smartertools.com