I don't think you can disable their ability to set one up, but you can restrict a lot of the functions via IT Policy (like being able to 'send as' the BIS address from their company Blackberry). This would restrict their ability to forward corporate (confidential?) emails as their BIS address.
__________________ No longer a BES Admin, but it was fun while it lasted!
Yes we are on a BES and I am aware of limitations that can be handled through group policies on the BES. I also understand that if you limit or "disable" the users abilities in the BES, they can still recieve emails to a BIS address, they just can not send.