Deny access to display settings

[ottr]

... or you could set file permissions on desk.cpl.

c:\WINNT\SYSTEM32\desk.cpl