Yeah I've already seen that article, unfortunately many companies aren't willing to follow these guidelines. I've considered writing an application to only allow my direct actions to affect the desktop, however this proves hard when Windows Installer runs at the highest permission level in most instances.