Usually I execute this statement first
select 'deny delete on ['+name+'] to Loginame'+char(10)+'go'+char(10) from sysobjects where type = 'u'
Then copy the output in the result panal,paste in QA,then execute at one time.
You could execute deny delete on all the user table to certain login.
But if that user table belongs to that login,you cant do anything about that