For DELETE, a DENY DELETE should work.
For DROP, if the user created the table, they likely own it, so you'd have to use a DDL trigger for that AFAIK.
SQL DBA,SQL Server MVP(07, 08, 09) A socialist is someone who will give you the shirt off *someone else's* back.