There is a Unity registry value in Unity 3.1(5) to diable adding subscriber via SA. Administrator only can import subscriber from exchange to Unity through import tool. But I didn't find the same option in Unity 4.0(4). If cisco has remove this option from Unity 4.x or I can find it somewhere else.
Thanks,