you can remove the CFA from the phone, but if they have access to ccmuser they can set it.
you could take CFA from ccmuser, but then no one could set it that way.
also it would require you to associate each and every single phone to your user in order to make the change one phone at a time.
i really don't see feasible options for doing what you want.
HTH
java
if this helps, please rate
HTH
java
if this helps, please rate