You can try to use mandatory profiles or change the ntfs permisions on their
desktop folder in their user profile under documents and settings to be
read/list/execute also being sure that they are not the owner which would
allow them to change permissions if they knew how. --- Steve