Out of Office Agent Default Security

I know a user has to be at least Designer in the ACL of their mail db, with Create LotusScript/Java Agents selected. However, I thought that when a new user was created, the appropriate rights were given to enable the Out of Office agent (meaning the Create LotusScript/Java Agents was checked by default). Instead, creating a new user gives them Designer access to their mail db, without the Create LotusScript/Java Agents option checked. Am I doing something wrong when the user gets set up, or does this option have to be selected each time a user is set up? Thank you.

Subject: Out of Office Agent Default Security

This is a setting in the Domino directory. Once it is set, all users will be able to create out of office agents. It is on the security tab I believe.