Configure - Vista

I manage a few Windows XP Pro and Vista Business on a SBS2003 network. I need
a method to configure these PC's/notebooks to minimise downtime on these
machines due to user negligence. Some of these may be :

Turn off features (not critical to performance) to minimise risk of infection.
Allow one method of internet connection, disable the rest (eg wireless
features).
Prevent users accidently moving/deleting critical OS files.
etc
Firstly, I need to know what the OS has to offer in way of control in a
simple way.
Secondly, the quickest way to implement this.

PS I have see documentation on group policies and find these lengthy and
sometimes difficult to understand/implement. Maybe I am looking for an idiots
guide to group ploicy.
--
Thanks for the help
Jack