Hello,
You can remove their control over forwarding rules (Admin->Users->xxx->Options) but the greeting remains under their control for their own voicemail.
An (perhaps non ideal) option would be to forward their missed call to a different destinations voicemail, one that they can listen to but not make changes to.