I work in IT at a highschool in Norway. Every student and teacher has a laptop provided for them from the school. We restrict nothing, except bittorrent. If the student wants to waste their time in class by sitting on facebook, they are welcome to do so. Its their future, afterall. Ofcourse we got students who have downloaded something from somewhere and have gotten their computers full of viruses etc. This is not a problem however. We have a table with 5 network cables where the students can re-ghost their own machines. The Desktop and My Documents folder is stored on the D drive, so all they lose in the process, is programs they installed on their own after they got their computer. TL;DR: Dont restrict anything except torrents. Hook up some network connections somewhere, so they can ghost up their own machines if they screw up.

STOP "Making war" on every damn thing you people can come across. When you take out the garbage, do you make war on it aswell?