Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2.
You use a virtual desktop infrastructure (VDI) environment to provide access to applications. All virtual desktop computer object s are located in an organizational unit (OU) named VirtualDesktops. All client computer objects are located in an OU named Desktops.
You need to ensure that all existing users receive the same desktop shortcuts, and that they are not able to modify the sho rtcuts from virtual desktops.
Which two actions should you perform?()