considering i'm installing software to prevent them from accessing teh pr0n, that might be slightly counter productive, pug. it's all relatively easy to bypass though, so the kids with the brains to do it can find their own rewards.
Xessive, i'm glad you've heard good things about the Acronis stuff, because that was the software i was leaning towards. there's stuff in Acronis which would mean i could just do the installs and patching on one system and then install the image via a network to all the other laptops at once, which would cut out days worth of work.