MS is actually moving on this on several fronts. There is a
thing called "ZAW" (Zero Administration Windows) that is designed
for closed "net computers" administered from a central site.
Users of such machines will not have access to any configuration
tools at all and will most certainly not be given access to any
technical information on drivers and such. There is also a MS supported
standard for a network connect device that combines PCI/USB and other
devices into a single port with an NDA protected spec.