In many cases, administrators will not want users to have access to all the objects provided with the Workplace Shell. One permanent way to remove objects is to create a custom OS2.INI file.
For example, to remove the shredder from the desktop, edit the "INI.RC" file in the "\OS2" directory and remove the shredder line:
"PM_InstallObject" "Shredder;WPShredder;<WP_DESKTOP>" "ICONPOS=908;OBJECTID=<WP_SHRED>"
Then make a new OS2.INI file by typing:
MAKINI NEW.INI INI.RC.
Replace OS2.INI with the contents of NEW.INI using the techniques described in Restoring a Backup Version of OS2.INI.