I am lucky enough that most of my users don't care enough to upgrade their OS. If they're interested in doing so, they generally ask me before anything. Disabling App Loader should help. However, they don't need desktop manager to load the OS any longer. They can use the loader.exe file that comes with the OS. I am not sure if setting that to false will disable that as well.