Yes. How you do that depends on the icon you're trying to remove. If you're trying to rid your users of icons such as My Computer or My Network Places, then you must modify users' registries from the logon script. If it's another icon, simply delete the files. These are per-user settings, so users won't require elevated privileges in order to run the scripts.
This was first published in June 2003