In a secured Windows Server 2008 R2 Remote Desktop Services server it may be desirable to remove the Screen Resolution and Personalize items from the desktop context menu.

This can be achieved by deleting the following registry keys:

HKEY_CLASSES_ROOT\DesktopBackground\Shell\Display
HKEY_CLASSES_ROOT\DesktopBackground\Shell\Personalize

This can be scripted as follows:

subinacl /subkeyreg HKEY_CLASSES_ROOT\DesktopBackground\Shell /setowner=%USERDOMAIN%\%USERNAME%
subinacl /subkeyreg HKEY_CLASSES_ROOT\DesktopBackground\Shell /grant=%USERDOMAIN%\%USERNAME%=F
REG DELETE HKEY_CLASSES_ROOT\DesktopBackground\Shell\Display /F
REG DELETE HKEY_CLASSES_ROOT\DesktopBackground\Shell\Personalize /F

Subinacl is a part of the Resource Kit and available for download from the Microsoft website.

SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?familyid=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b