Enforce specific icons on desktop

How can I enforce specific icons and shortcuts to be displayed on domain users’ desktops and restrict them from adding or deleting these icons and shortcuts?