The easy answer would be to lower their access privileges to “Editor” … that will prevent them from creating any agents – but SHOULD still allow them to use the built-in OOO and archiving features of the R7 mail template. (Granted, Notes gets a bit buggy about that.)
However, two additional (albeit conflicting) thoughts on this:
1. It sounds like you’re trying to prevent users from automating an action that they are still allowed/enabled to do manually. This rarely makes sense. If they’re not allowed to ever forward e-mail messages to their home/personal/external e-mail accounts, then you should be blocking such e-mail activity in other ways. But, if they’re allowed to do it manually, then why do you care that they automate such activity. (It sounds to me like you have employees who are trying to be good employees and still cover their duties even when they’re on vacation.)
2. Any such “mail sending” agents are EXTREMELY dangerous!!! It is very easy for a user to create an “infinite loop” in such situations. For example, if they write an agent that will forward all e-mail they receive and the e-mail account that they forward it to rejects it for any reason (or auto-reponds due to an OOO agent), this will create an infinite loop of the Notes mail DB receiving an incoming message, the agent forwards it externally, the external e-mail account responds, repeat, repeat, repeat. I once saw an agent like this create millions of e-mail messages in a matter of a couple of hours – ate up all available DASD on the server and brought the entire Notes server down!!! I recommend you notify all employees that all “mail sending agents” must be pre-approved by IT!!!
Here is another way that you would want to do to limit the forwarding ability.
You will also want to prevent users from creating rules that forward messages outside of the company. This can be done within the server configuration document. Go to the Router/SMTP tab, then Restrictions and Controls, then to Delivery Controls. Set the value for the field “User rules mail forwarding:” to “Disabled”.