prevent user deleting desktop icons

[Ben]

Put this as a user logon script.

@echo off
Rem *** Prevents Users from Renaming & Deleting System Desktop Icons
***

Rem Checks for the Existence of Subinacl.exe
if exist %windir%\Subinacl.exe GOTO SetPermissions
GOTO EOF

:SetPermissions
Rem Prevent Deleting Icons My Computer, IE and so on..
subinacl.exe /subkeyreg
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons"
/GRANT=Northside\%UserName%=AQCEYLWO

Rem Prevent Renaming Icons My Computer, IE and so on..
subinacl.exe /subkeyreg
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}"
/GRANT=Northside\%UserName%=AQCEYLWO
subinacl.exe /subkeyreg
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}"
/GRANT=Northside\%UserName%=AQCEYLWO
subinacl.exe /subkeyreg
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}"
/GRANT=Northside\%UserName%=AQCEYLWO
subinacl.exe /subkeyreg
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}"
/GRANT=Northside\%UserName%=F
subinacl.exe /subkeyreg
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}"
/GRANT=Northside\%UserName%=R

:EOF
cls
exit