graboy,
The problem with all your requests is that, if fulfilled, the system would be about as usable as Linux is as a Desktop. I manage one SUSE Linux box, so I'm speaking from experience, though limited.
Although your requests sound reasonable, the end result would likely be as bad as the Vista security model. Yeah, it sounded good on paper, but the reality is exactly as depected in the Apple ad.
I don't use Vista. Instead, I develop directly on Windows Server 2003.