Can you not use Group policy on the domain controller and the stick the user in an OU with the policy applied.
there is also a registry edit following the link below:
http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/RegistryTips/Disable-Hide/HideDesktopIcons.html