RESTRICTIONS

How can I restrict my company users from adding other users (who are not part of my organization) in contact list and restrict direct messages